{
    "id": "1811024",
    "ioc": "wrned.com",
    "ioc_type": "domain",
    "threat_type": "botnet_cc",
    "malware": "unknown",
    "malware_printable": "Unknown malware",
    "malware_alias": null,
    "confidence_level": "49",
    "first_seen": "2026-05-12 14:52:10 UTC",
    "last_seen": "2026-05-11 17:10:16 UTC",
    "reporter": null,
    "reference": "https:\/\/blog.xlab.qianxin.com\/mr_rot13-the-elusive-6-year-hacker-group-weaponizing-critical-cpanel-flaws-for-backdoor-deployment_cn\/",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1811024",
    "tags": []
}