{
    "id": "1853347",
    "ioc": "http:\/\/91.92.42.213\/phantom.sh",
    "ioc_type": "url",
    "threat_type": "payload_delivery",
    "malware": "unknown",
    "malware_printable": "Unknown malware",
    "malware_alias": null,
    "confidence_level": "75",
    "first_seen": "2026-07-18 17:32:56 UTC",
    "last_seen": "2026-07-18 10:00:29 UTC",
    "reporter": null,
    "reference": "https:\/\/greedybear.honeynet.org",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1853347",
    "tags": [
        "honeypot"
    ]
}