{
    "id": "1796048",
    "ioc": "http:\/\/217.69.2.135\/darwin-universal\/olPDwN6o4fVo56us9X3T%2Fw%3D%3D?wallet=trezor",
    "ioc_type": "url",
    "threat_type": "payload_delivery",
    "malware": "js.glassworm",
    "malware_printable": "GlassWorm",
    "malware_alias": null,
    "confidence_level": "100",
    "first_seen": "2026-04-22 11:26:45 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": "https:\/\/codeberg.org\/tip-o-deincognito\/glassworm-writeup",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1796048",
    "tags": [
        "glassworm",
        "wallet-trojan",
        "Wave3"
    ]
}