{
    "id": "1870638",
    "ioc": "hitstp.com",
    "ioc_type": "domain",
    "threat_type": "botnet_cc",
    "malware": "unknown_rat",
    "malware_printable": "Unknown RAT",
    "malware_alias": null,
    "confidence_level": "100",
    "first_seen": "2026-08-08 06:48:30 UTC",
    "last_seen": null,
    "reporter": "abuse_ch",
    "reference": "https:\/\/urlhaus.abuse.ch\/url\/3898752\/",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1870638",
    "tags": [
        "brand-impersonation",
        "ConnectWise",
        "DocuSign",
        "docusign-lure",
        "rmm",
        "ScreenConnect"
    ]
}