{
 "type": "bundle",
 "id": "bundle--7b623b46-ac3b-4cde-a66f-41cd7cdedfc9",
 "spec_version": "2.1",
 "objects": [
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--7ede0471-c318-5028-a0d9-8adedee314e7",
   "name": "Tia N. List",
   "identity_class": "organization",
   "created": "2026-10-14T05:43:09.854127Z",
   "modified": "2026-10-14T05:43:09.854127Z"
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8d539ace-598e-5a3b-b713-0396732d2a2d",
   "created": "2026-09-05T00:00:00Z",
   "modified": "2026-10-22T00:00:00Z",
   "name": "103.102.31.18 (ipv4)",
   "pattern": "[ipv4-addr:value = '103.102.31.18']",
   "valid_from": "2026-09-05T00:00:00Z",
   "valid_until": "2026-10-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 70,
   "x_tia_status": "active",
   "x_tia_confidence": "corroborated",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=103.102.31.18"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d0b1cd64-6cc5-549b-bbbb-449643551ed9",
   "created": "2026-06-17T00:00:00Z",
   "modified": "2026-07-25T00:00:00Z",
   "name": "5.180.41.35 (ipv4)",
   "pattern": "[ipv4-addr:value = '5.180.41.35']",
   "valid_from": "2026-06-17T00:00:00Z",
   "valid_until": "2026-07-25T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 70,
   "x_tia_status": "expired",
   "x_tia_confidence": "corroborated",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=5.180.41.35"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--de77db78-071e-556c-9d22-0a54f71a4c84",
   "created": "2026-09-05T00:00:00Z",
   "modified": "2026-10-22T00:00:00Z",
   "name": "82.192.72.4 (ipv4)",
   "pattern": "[ipv4-addr:value = '82.192.72.4']",
   "valid_from": "2026-09-05T00:00:00Z",
   "valid_until": "2026-10-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 70,
   "x_tia_status": "active",
   "x_tia_confidence": "corroborated",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=82.192.72.4"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--87109d37-d10e-5f53-801e-55c932f090e6",
   "created": "2026-09-18T00:00:00Z",
   "modified": "2026-10-18T00:00:00Z",
   "name": "103.236.84.103 (ipv4)",
   "pattern": "[ipv4-addr:value = '103.236.84.103']",
   "valid_from": "2026-09-18T00:00:00Z",
   "valid_until": "2026-10-18T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=103.236.84.103"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--49f16f6d-4033-58b0-a2ee-9d2894cbb4e3",
   "created": "2026-05-30T00:00:00Z",
   "modified": "2026-05-30T00:00:00Z",
   "name": "104.207.144.154 (ipv4)",
   "pattern": "[ipv4-addr:value = '104.207.144.154']",
   "valid_from": "2026-05-30T00:00:00Z",
   "valid_until": "2026-05-30T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=104.207.144.154"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b10e8010-ce92-5df1-9830-fcb9b2ad299e",
   "created": "2026-09-12T00:00:00Z",
   "modified": "2026-09-12T00:00:00Z",
   "name": "111.228.49.20 (ipv4)",
   "pattern": "[ipv4-addr:value = '111.228.49.20']",
   "valid_from": "2026-09-12T00:00:00Z",
   "valid_until": "2026-09-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=111.228.49.20"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--921e6597-301b-59fe-8817-a180bb3353b0",
   "created": "2024-02-19T00:00:00Z",
   "modified": "2024-02-19T00:00:00Z",
   "name": "118.69.65.60 (ipv4)",
   "pattern": "[ipv4-addr:value = '118.69.65.60']",
   "valid_from": "2024-02-19T00:00:00Z",
   "valid_until": "2024-02-19T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=118.69.65.60"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6d0234c5-5bb1-50ef-898b-4962a8fe29bc",
   "created": "2026-09-15T00:00:00Z",
   "modified": "2026-10-15T00:00:00Z",
   "name": "120.53.19.157 (ipv4)",
   "pattern": "[ipv4-addr:value = '120.53.19.157']",
   "valid_from": "2026-09-15T00:00:00Z",
   "valid_until": "2026-10-15T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=120.53.19.157"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d1675e86-2d07-5234-8b24-bf83e51f2489",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "135.136.63.63 (ipv4)",
   "pattern": "[ipv4-addr:value = '135.136.63.63']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=135.136.63.63"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9a453225-1e6c-52c4-a821-0c71ba460801",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "138.2.102.66 (ipv4)",
   "pattern": "[ipv4-addr:value = '138.2.102.66']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=138.2.102.66"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5d3fb868-c7a9-59be-8101-bf50c66c3c06",
   "created": "2026-06-22T00:00:00Z",
   "modified": "2026-06-22T00:00:00Z",
   "name": "138.226.246.94 (ipv4)",
   "pattern": "[ipv4-addr:value = '138.226.246.94']",
   "valid_from": "2026-06-22T00:00:00Z",
   "valid_until": "2026-06-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=138.226.246.94"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--db5e38b1-d474-501a-8302-d9981172131f",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "139.28.49.138 (ipv4)",
   "pattern": "[ipv4-addr:value = '139.28.49.138']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=139.28.49.138"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ee435a4f-65ee-5000-9654-f4831598d1bd",
   "created": "2026-06-09T00:00:00Z",
   "modified": "2026-06-09T00:00:00Z",
   "name": "144.208.127.155 (ipv4)",
   "pattern": "[ipv4-addr:value = '144.208.127.155']",
   "valid_from": "2026-06-09T00:00:00Z",
   "valid_until": "2026-06-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=144.208.127.155"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--64072cf3-cb42-5e9f-bf62-08400136d6d7",
   "created": "2026-05-30T00:00:00Z",
   "modified": "2026-05-30T00:00:00Z",
   "name": "146.19.216.119 (ipv4)",
   "pattern": "[ipv4-addr:value = '146.19.216.119']",
   "valid_from": "2026-05-30T00:00:00Z",
   "valid_until": "2026-05-30T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=146.19.216.119"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--88995758-59e7-5fa3-a352-369f44719a2e",
   "created": "2026-06-30T00:00:00Z",
   "modified": "2026-06-30T00:00:00Z",
   "name": "146.70.139.154 (ipv4)",
   "pattern": "[ipv4-addr:value = '146.70.139.154']",
   "valid_from": "2026-06-30T00:00:00Z",
   "valid_until": "2026-06-30T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=146.70.139.154"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ee852d03-7eb6-5aa6-9437-ccf7a8249466",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "146.70.169.246 (ipv4)",
   "pattern": "[ipv4-addr:value = '146.70.169.246']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=146.70.169.246"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6c3b53e5-120d-515d-92b6-722d9486cd25",
   "created": "2026-08-30T00:00:00Z",
   "modified": "2026-08-30T00:00:00Z",
   "name": "146.70.41.178 (ipv4)",
   "pattern": "[ipv4-addr:value = '146.70.41.178']",
   "valid_from": "2026-08-30T00:00:00Z",
   "valid_until": "2026-08-30T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=146.70.41.178"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--960dd0e0-3c6b-52d3-b244-f9dd57921b92",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "152.53.173.29 (ipv4)",
   "pattern": "[ipv4-addr:value = '152.53.173.29']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=152.53.173.29"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fe5c9c40-4fde-5457-9cf5-39493754cc3e",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "152.53.173.30 (ipv4)",
   "pattern": "[ipv4-addr:value = '152.53.173.30']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=152.53.173.30"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7f3f2d50-452f-59a9-b6ce-c698d70c1de4",
   "created": "2024-02-19T00:00:00Z",
   "modified": "2024-02-19T00:00:00Z",
   "name": "155.133.5.14 (ipv4)",
   "pattern": "[ipv4-addr:value = '155.133.5.14']",
   "valid_from": "2024-02-19T00:00:00Z",
   "valid_until": "2024-02-19T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=155.133.5.14"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--84d5727a-db77-5513-ab7c-864d52ec8391",
   "created": "2024-02-19T00:00:00Z",
   "modified": "2024-02-19T00:00:00Z",
   "name": "155.133.5.15 (ipv4)",
   "pattern": "[ipv4-addr:value = '155.133.5.15']",
   "valid_from": "2024-02-19T00:00:00Z",
   "valid_until": "2024-02-19T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=155.133.5.15"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6ac06d21-8cfe-5b61-a1db-f4d0a9a1f5b1",
   "created": "2026-08-12T00:00:00Z",
   "modified": "2026-08-12T00:00:00Z",
   "name": "158.220.87.79 (ipv4)",
   "pattern": "[ipv4-addr:value = '158.220.87.79']",
   "valid_from": "2026-08-12T00:00:00Z",
   "valid_until": "2026-08-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=158.220.87.79"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4c0addfb-d53e-59d5-9cbb-918089da9777",
   "created": "2026-04-13T00:00:00Z",
   "modified": "2026-04-13T00:00:00Z",
   "name": "160.119.76.250 (ipv4)",
   "pattern": "[ipv4-addr:value = '160.119.76.250']",
   "valid_from": "2026-04-13T00:00:00Z",
   "valid_until": "2026-04-13T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=160.119.76.250"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3d6119c6-a76c-5d2e-86c3-c6f03e910c3c",
   "created": "2026-09-09T00:00:00Z",
   "modified": "2026-09-09T00:00:00Z",
   "name": "160.191.242.92 (ipv4)",
   "pattern": "[ipv4-addr:value = '160.191.242.92']",
   "valid_from": "2026-09-09T00:00:00Z",
   "valid_until": "2026-09-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=160.191.242.92"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--eeec03ed-7906-5ca0-89e4-601298a5659f",
   "created": "2026-09-14T00:00:00Z",
   "modified": "2026-09-14T00:00:00Z",
   "name": "160.250.132.238 (ipv4)",
   "pattern": "[ipv4-addr:value = '160.250.132.238']",
   "valid_from": "2026-09-14T00:00:00Z",
   "valid_until": "2026-09-14T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=160.250.132.238"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--10f24aff-7daa-550d-bee5-e3fdd186ca40",
   "created": "2024-08-22T00:00:00Z",
   "modified": "2024-08-22T00:00:00Z",
   "name": "162.120.71.224 (ipv4)",
   "pattern": "[ipv4-addr:value = '162.120.71.224']",
   "valid_from": "2024-08-22T00:00:00Z",
   "valid_until": "2024-08-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=162.120.71.224"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6aee7c66-39c9-5228-b767-5a7feecc09d2",
   "created": "2026-09-25T00:00:00Z",
   "modified": "2026-10-25T00:00:00Z",
   "name": "162.219.30.165 (ipv4)",
   "pattern": "[ipv4-addr:value = '162.219.30.165']",
   "valid_from": "2026-09-25T00:00:00Z",
   "valid_until": "2026-10-25T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=162.219.30.165"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--de5cb08f-5e11-52eb-b514-22399945400b",
   "created": "2026-06-09T00:00:00Z",
   "modified": "2026-06-09T00:00:00Z",
   "name": "162.33.177.101 (ipv4)",
   "pattern": "[ipv4-addr:value = '162.33.177.101']",
   "valid_from": "2026-06-09T00:00:00Z",
   "valid_until": "2026-06-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=162.33.177.101"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4bbd86e8-1549-5d7e-a8d5-94d0a13d8b10",
   "created": "2026-09-12T00:00:00Z",
   "modified": "2026-09-12T00:00:00Z",
   "name": "162.35.122.126 (ipv4)",
   "pattern": "[ipv4-addr:value = '162.35.122.126']",
   "valid_from": "2026-09-12T00:00:00Z",
   "valid_until": "2026-09-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=162.35.122.126"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c0d579ac-15a0-5cfc-a19b-a8ff96c1a051",
   "created": "2026-09-01T00:00:00Z",
   "modified": "2026-09-01T00:00:00Z",
   "name": "162.55.0.0 (ipv4)",
   "pattern": "[ipv4-addr:value = '162.55.0.0']",
   "valid_from": "2026-09-01T00:00:00Z",
   "valid_until": "2026-09-01T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=162.55.0.0"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--10b76a9c-b371-52d3-ba5d-734b9274ade9",
   "created": "2026-09-01T00:00:00Z",
   "modified": "2026-09-01T00:00:00Z",
   "name": "162.55.80.0 (ipv4)",
   "pattern": "[ipv4-addr:value = '162.55.80.0']",
   "valid_from": "2026-09-01T00:00:00Z",
   "valid_until": "2026-09-01T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=162.55.80.0"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fee2b51c-4a46-5993-b283-013ce254d9ba",
   "created": "2026-09-12T00:00:00Z",
   "modified": "2026-09-12T00:00:00Z",
   "name": "165.154.68.30 (ipv4)",
   "pattern": "[ipv4-addr:value = '165.154.68.30']",
   "valid_from": "2026-09-12T00:00:00Z",
   "valid_until": "2026-09-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=165.154.68.30"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f06349cc-1b14-59cc-9dfb-36d4511caa7b",
   "created": "2026-09-15T00:00:00Z",
   "modified": "2026-10-15T00:00:00Z",
   "name": "165.99.207.153 (ipv4)",
   "pattern": "[ipv4-addr:value = '165.99.207.153']",
   "valid_from": "2026-09-15T00:00:00Z",
   "valid_until": "2026-10-15T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=165.99.207.153"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--447c0b89-f262-59da-81c6-a102afefdebc",
   "created": "2026-08-02T00:00:00Z",
   "modified": "2026-08-02T00:00:00Z",
   "name": "166.88.134.62 (ipv4)",
   "pattern": "[ipv4-addr:value = '166.88.134.62']",
   "valid_from": "2026-08-02T00:00:00Z",
   "valid_until": "2026-08-02T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=166.88.134.62"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0abb6e65-a109-5dda-bbf8-0670b880c5c6",
   "created": "2024-08-22T00:00:00Z",
   "modified": "2024-08-22T00:00:00Z",
   "name": "172.86.116.8 (ipv4)",
   "pattern": "[ipv4-addr:value = '172.86.116.8']",
   "valid_from": "2024-08-22T00:00:00Z",
   "valid_until": "2024-08-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=172.86.116.8"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b58b7916-0808-5237-b783-242089c5f890",
   "created": "2026-09-01T00:00:00Z",
   "modified": "2026-09-02T00:00:00Z",
   "name": "176.65.148.184 (ipv4)",
   "pattern": "[ipv4-addr:value = '176.65.148.184']",
   "valid_from": "2026-09-01T00:00:00Z",
   "valid_until": "2026-09-02T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=176.65.148.184"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--51fd573b-0406-5ed9-9e9e-21398b393d3f",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "176.65.149.52 (ipv4)",
   "pattern": "[ipv4-addr:value = '176.65.149.52']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=176.65.149.52"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0a37abc7-a299-54aa-8aa4-d7586e2c048b",
   "created": "2026-01-28T00:00:00Z",
   "modified": "2026-01-28T00:00:00Z",
   "name": "187.108.1.130 (ipv4)",
   "pattern": "[ipv4-addr:value = '187.108.1.130']",
   "valid_from": "2026-01-28T00:00:00Z",
   "valid_until": "2026-01-28T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=187.108.1.130"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0164ead7-6cd4-52ff-bf8f-d8b96dd0470a",
   "created": "2026-06-06T00:00:00Z",
   "modified": "2026-06-06T00:00:00Z",
   "name": "192.236.147.131 (ipv4)",
   "pattern": "[ipv4-addr:value = '192.236.147.131']",
   "valid_from": "2026-06-06T00:00:00Z",
   "valid_until": "2026-06-06T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=192.236.147.131"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--970991c3-47f0-5907-9f59-387c600160dd",
   "created": "2026-06-06T00:00:00Z",
   "modified": "2026-06-06T00:00:00Z",
   "name": "192.236.147.138 (ipv4)",
   "pattern": "[ipv4-addr:value = '192.236.147.138']",
   "valid_from": "2026-06-06T00:00:00Z",
   "valid_until": "2026-06-06T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=192.236.147.138"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ef0dc603-4102-5510-80c5-573f624b7b25",
   "created": "2026-06-30T00:00:00Z",
   "modified": "2026-06-30T00:00:00Z",
   "name": "192.42.116.105 (ipv4)",
   "pattern": "[ipv4-addr:value = '192.42.116.105']",
   "valid_from": "2026-06-30T00:00:00Z",
   "valid_until": "2026-06-30T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=192.42.116.105"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1440dc7c-6997-57d0-a90a-3461b4bb55b5",
   "created": "2026-06-30T00:00:00Z",
   "modified": "2026-06-30T00:00:00Z",
   "name": "192.42.116.58 (ipv4)",
   "pattern": "[ipv4-addr:value = '192.42.116.58']",
   "valid_from": "2026-06-30T00:00:00Z",
   "valid_until": "2026-06-30T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=192.42.116.58"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d5b831de-106b-5f9e-8f65-78e1814f8803",
   "created": "2026-06-06T00:00:00Z",
   "modified": "2026-06-06T00:00:00Z",
   "name": "193.141.60.212 (ipv4)",
   "pattern": "[ipv4-addr:value = '193.141.60.212']",
   "valid_from": "2026-06-06T00:00:00Z",
   "valid_until": "2026-06-06T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=193.141.60.212"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c9250390-fee5-56c0-a106-9738eea05611",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "193.24.211.91 (ipv4)",
   "pattern": "[ipv4-addr:value = '193.24.211.91']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=193.24.211.91"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0daa9bcb-6207-5536-99c3-d78ce44ec4eb",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "193.32.126.168 (ipv4)",
   "pattern": "[ipv4-addr:value = '193.32.126.168']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=193.32.126.168"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bddd4558-6104-5162-be68-fa079a8e1c6b",
   "created": "2026-07-22T00:00:00Z",
   "modified": "2026-07-22T00:00:00Z",
   "name": "194.213.18.137 (ipv4)",
   "pattern": "[ipv4-addr:value = '194.213.18.137']",
   "valid_from": "2026-07-22T00:00:00Z",
   "valid_until": "2026-07-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=194.213.18.137"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f1e0cfdb-a207-583d-8d23-44c2ee910f87",
   "created": "2026-09-20T00:00:00Z",
   "modified": "2026-10-20T00:00:00Z",
   "name": "194.233.84.90 (ipv4)",
   "pattern": "[ipv4-addr:value = '194.233.84.90']",
   "valid_from": "2026-09-20T00:00:00Z",
   "valid_until": "2026-10-20T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=194.233.84.90"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--564a5d26-67cc-55f5-a93f-09416d4f3c5b",
   "created": "2024-08-22T00:00:00Z",
   "modified": "2024-08-22T00:00:00Z",
   "name": "194.48.154.67 (ipv4)",
   "pattern": "[ipv4-addr:value = '194.48.154.67']",
   "valid_from": "2024-08-22T00:00:00Z",
   "valid_until": "2024-08-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=194.48.154.67"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5f6fbddf-23f0-58ea-a59c-8812bafefb6d",
   "created": "2026-05-13T00:00:00Z",
   "modified": "2026-05-13T00:00:00Z",
   "name": "194.58.66.0 (ipv4)",
   "pattern": "[ipv4-addr:value = '194.58.66.0']",
   "valid_from": "2026-05-13T00:00:00Z",
   "valid_until": "2026-05-13T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=194.58.66.0"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0d50e360-028e-518a-afd6-aa631cc3e67b",
   "created": "2026-07-27T00:00:00Z",
   "modified": "2026-07-27T00:00:00Z",
   "name": "206.72.242.124 (ipv4)",
   "pattern": "[ipv4-addr:value = '206.72.242.124']",
   "valid_from": "2026-07-27T00:00:00Z",
   "valid_until": "2026-07-27T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=206.72.242.124"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3d305065-fc54-5c64-b176-c3cfc1a0be08",
   "created": "2026-07-27T00:00:00Z",
   "modified": "2026-07-27T00:00:00Z",
   "name": "206.72.242.162 (ipv4)",
   "pattern": "[ipv4-addr:value = '206.72.242.162']",
   "valid_from": "2026-07-27T00:00:00Z",
   "valid_until": "2026-07-27T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=206.72.242.162"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c4e74f1c-e0a5-581a-a9b4-b8a39e69023b",
   "created": "2024-10-24T00:00:00Z",
   "modified": "2024-10-24T00:00:00Z",
   "name": "208.115.232.194 (ipv4)",
   "pattern": "[ipv4-addr:value = '208.115.232.194']",
   "valid_from": "2024-10-24T00:00:00Z",
   "valid_until": "2024-10-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=208.115.232.194"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ea32ac2a-8acc-57bb-af64-e205275d5ca3",
   "created": "2026-06-09T00:00:00Z",
   "modified": "2026-06-09T00:00:00Z",
   "name": "209.182.225.136 (ipv4)",
   "pattern": "[ipv4-addr:value = '209.182.225.136']",
   "valid_from": "2026-06-09T00:00:00Z",
   "valid_until": "2026-06-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=209.182.225.136"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bdc02b8e-a237-5068-9fed-c90bf80873bc",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "212.132.98.170 (ipv4)",
   "pattern": "[ipv4-addr:value = '212.132.98.170']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=212.132.98.170"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2ae161ae-a80c-551f-b345-beea59f9d7dc",
   "created": "2026-06-22T00:00:00Z",
   "modified": "2026-06-22T00:00:00Z",
   "name": "212.86.125.24 (ipv4)",
   "pattern": "[ipv4-addr:value = '212.86.125.24']",
   "valid_from": "2026-06-22T00:00:00Z",
   "valid_until": "2026-06-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=212.86.125.24"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8726c09e-e500-5187-8258-a0f591ed3f61",
   "created": "2026-06-22T00:00:00Z",
   "modified": "2026-06-22T00:00:00Z",
   "name": "213.111.148.90 (ipv4)",
   "pattern": "[ipv4-addr:value = '213.111.148.90']",
   "valid_from": "2026-06-22T00:00:00Z",
   "valid_until": "2026-06-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=213.111.148.90"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d11896ed-045f-536a-b206-1955a7698799",
   "created": "2026-09-12T00:00:00Z",
   "modified": "2026-09-12T00:00:00Z",
   "name": "213.209.159.154 (ipv4)",
   "pattern": "[ipv4-addr:value = '213.209.159.154']",
   "valid_from": "2026-09-12T00:00:00Z",
   "valid_until": "2026-09-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=213.209.159.154"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--86156096-ac1d-5af1-837a-81ab1d67d6d0",
   "created": "2024-08-22T00:00:00Z",
   "modified": "2024-08-22T00:00:00Z",
   "name": "216.146.25.208 (ipv4)",
   "pattern": "[ipv4-addr:value = '216.146.25.208']",
   "valid_from": "2024-08-22T00:00:00Z",
   "valid_until": "2024-08-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=216.146.25.208"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--91bba6b4-4909-5a03-85c7-bfc443c9e848",
   "created": "2026-06-26T00:00:00Z",
   "modified": "2026-06-26T00:00:00Z",
   "name": "216.152.148.54 (ipv4)",
   "pattern": "[ipv4-addr:value = '216.152.148.54']",
   "valid_from": "2026-06-26T00:00:00Z",
   "valid_until": "2026-06-26T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=216.152.148.54"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2f753d8c-b731-53cf-9488-82cbfa28cd22",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "217.154.53.116 (ipv4)",
   "pattern": "[ipv4-addr:value = '217.154.53.116']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=217.154.53.116"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ea7cfc11-f43a-59ab-9a73-32e5a6974be9",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "217.154.53.187 (ipv4)",
   "pattern": "[ipv4-addr:value = '217.154.53.187']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=217.154.53.187"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0661b268-31e4-56d4-8602-11152bd73b33",
   "created": "2026-03-12T00:00:00Z",
   "modified": "2026-03-12T00:00:00Z",
   "name": "23.225.52.67 (ipv4)",
   "pattern": "[ipv4-addr:value = '23.225.52.67']",
   "valid_from": "2026-03-12T00:00:00Z",
   "valid_until": "2026-03-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=23.225.52.67"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f095a9c2-3a58-569e-b597-72fe1bd37ba6",
   "created": "2026-09-08T00:00:00Z",
   "modified": "2026-09-08T00:00:00Z",
   "name": "23.234.64.0 (ipv4)",
   "pattern": "[ipv4-addr:value = '23.234.64.0']",
   "valid_from": "2026-09-08T00:00:00Z",
   "valid_until": "2026-09-08T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=23.234.64.0"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0c9611b4-23c0-544a-92b2-13199d76b196",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "31.177.110.136 (ipv4)",
   "pattern": "[ipv4-addr:value = '31.177.110.136']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=31.177.110.136"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d19db840-c34c-568a-8584-8881bd490283",
   "created": "2026-07-20T00:00:00Z",
   "modified": "2026-07-20T00:00:00Z",
   "name": "34.153.223.102 (ipv4)",
   "pattern": "[ipv4-addr:value = '34.153.223.102']",
   "valid_from": "2026-07-20T00:00:00Z",
   "valid_until": "2026-07-20T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=34.153.223.102"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d290f3f4-442f-5ef7-981c-90caa0b42332",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "37.32.73.156 (ipv4)",
   "pattern": "[ipv4-addr:value = '37.32.73.156']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=37.32.73.156"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--10cb13c6-f58c-5cb2-b707-5bd203da280d",
   "created": "2026-06-09T00:00:00Z",
   "modified": "2026-06-09T00:00:00Z",
   "name": "38.54.107.167 (ipv4)",
   "pattern": "[ipv4-addr:value = '38.54.107.167']",
   "valid_from": "2026-06-09T00:00:00Z",
   "valid_until": "2026-06-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=38.54.107.167"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--190ec6d0-c73b-5442-b7c5-12f950f63b7c",
   "created": "2026-06-09T00:00:00Z",
   "modified": "2026-06-09T00:00:00Z",
   "name": "38.54.88.201 (ipv4)",
   "pattern": "[ipv4-addr:value = '38.54.88.201']",
   "valid_from": "2026-06-09T00:00:00Z",
   "valid_until": "2026-06-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=38.54.88.201"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fee40f55-5307-5b24-842f-bffe5063da00",
   "created": "2026-06-09T00:00:00Z",
   "modified": "2026-06-09T00:00:00Z",
   "name": "38.60.157.139 (ipv4)",
   "pattern": "[ipv4-addr:value = '38.60.157.139']",
   "valid_from": "2026-06-09T00:00:00Z",
   "valid_until": "2026-06-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=38.60.157.139"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e2fe52e8-c305-57f1-a587-380fe2e6ecbc",
   "created": "2026-06-26T00:00:00Z",
   "modified": "2026-06-26T00:00:00Z",
   "name": "38.60.157.212 (ipv4)",
   "pattern": "[ipv4-addr:value = '38.60.157.212']",
   "valid_from": "2026-06-26T00:00:00Z",
   "valid_until": "2026-06-26T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=38.60.157.212"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9082f89b-a684-5572-8fb0-3a296babcb16",
   "created": "2026-09-10T00:00:00Z",
   "modified": "2026-09-10T00:00:00Z",
   "name": "38.76.183.197 (ipv4)",
   "pattern": "[ipv4-addr:value = '38.76.183.197']",
   "valid_from": "2026-09-10T00:00:00Z",
   "valid_until": "2026-09-10T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=38.76.183.197"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f980a376-1b1b-5802-949c-c35a32c66793",
   "created": "2026-09-13T00:00:00Z",
   "modified": "2026-09-13T00:00:00Z",
   "name": "39.96.201.230 (ipv4)",
   "pattern": "[ipv4-addr:value = '39.96.201.230']",
   "valid_from": "2026-09-13T00:00:00Z",
   "valid_until": "2026-09-13T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=39.96.201.230"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b9080ab6-5445-56d0-9c73-a6a9cd753b14",
   "created": "2026-07-01T00:00:00Z",
   "modified": "2026-07-01T00:00:00Z",
   "name": "45.131.66.106 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.131.66.106']",
   "valid_from": "2026-07-01T00:00:00Z",
   "valid_until": "2026-07-01T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.131.66.106"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4d04dba3-556f-5ffa-94c1-20ba0b733e00",
   "created": "2026-09-28T00:00:00Z",
   "modified": "2026-10-28T00:00:00Z",
   "name": "45.140.205.28 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.140.205.28']",
   "valid_from": "2026-09-28T00:00:00Z",
   "valid_until": "2026-10-28T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.140.205.28"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ece53d04-14b7-56c0-a81f-403d907826de",
   "created": "2024-08-22T00:00:00Z",
   "modified": "2024-08-22T00:00:00Z",
   "name": "45.149.172.51 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.149.172.51']",
   "valid_from": "2024-08-22T00:00:00Z",
   "valid_until": "2024-08-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.149.172.51"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0f841f4e-b0dd-586d-a8d2-130653eeeb66",
   "created": "2026-01-28T00:00:00Z",
   "modified": "2026-01-28T00:00:00Z",
   "name": "45.234.176.202 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.234.176.202']",
   "valid_from": "2026-01-28T00:00:00Z",
   "valid_until": "2026-01-28T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.234.176.202"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5a49fd16-71bf-5cc7-90a5-bee919f62219",
   "created": "2025-01-14T00:00:00Z",
   "modified": "2025-01-14T00:00:00Z",
   "name": "45.55.158.47 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.55.158.47']",
   "valid_from": "2025-01-14T00:00:00Z",
   "valid_until": "2025-01-14T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.55.158.47"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e2861b63-5375-5205-9e46-4a311d921d37",
   "created": "2024-08-22T00:00:00Z",
   "modified": "2024-08-22T00:00:00Z",
   "name": "45.61.157.15 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.61.157.15']",
   "valid_from": "2024-08-22T00:00:00Z",
   "valid_until": "2024-08-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.61.157.15"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f77ed525-1da1-56f6-bbc5-3887eff07075",
   "created": "2026-06-09T00:00:00Z",
   "modified": "2026-06-09T00:00:00Z",
   "name": "45.76.26.42 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.76.26.42']",
   "valid_from": "2026-06-09T00:00:00Z",
   "valid_until": "2026-06-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.76.26.42"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ec970f70-568c-55b5-979a-6ddefceb11fb",
   "created": "2026-06-09T00:00:00Z",
   "modified": "2026-06-09T00:00:00Z",
   "name": "45.77.149.152 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.77.149.152']",
   "valid_from": "2026-06-09T00:00:00Z",
   "valid_until": "2026-06-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.77.149.152"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--abc238ec-a2c6-5e46-86ab-2aa26730aad8",
   "created": "2023-06-15T00:00:00Z",
   "modified": "2023-06-15T00:00:00Z",
   "name": "45.77.212.12 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.77.212.12']",
   "valid_from": "2023-06-15T00:00:00Z",
   "valid_until": "2023-06-15T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.77.212.12"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a7f32b3b-54d4-589a-b9c0-54405e2feef5",
   "created": "2026-10-01T00:00:00Z",
   "modified": "2026-10-31T00:00:00Z",
   "name": "45.78.224.85 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.78.224.85']",
   "valid_from": "2026-10-01T00:00:00Z",
   "valid_until": "2026-10-31T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.78.224.85"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b6cf6761-059e-5980-bf63-1533c7aa3913",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "45.90.4.121 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.90.4.121']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.90.4.121"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4668ed67-3583-59f8-bb00-28e6d1043352",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "45.90.4.128 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.90.4.128']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.90.4.128"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--74d83b2d-ade1-5fb4-9c56-d7902d62a0f0",
   "created": "2026-04-13T00:00:00Z",
   "modified": "2026-04-13T00:00:00Z",
   "name": "45.95.147.178 (ipv4)",
   "pattern": "[ipv4-addr:value = '45.95.147.178']",
   "valid_from": "2026-04-13T00:00:00Z",
   "valid_until": "2026-04-13T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=45.95.147.178"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--932991d0-6a0e-5463-b4fe-f18197cc3934",
   "created": "2026-09-29T00:00:00Z",
   "modified": "2026-10-29T00:00:00Z",
   "name": "47.105.36.109 (ipv4)",
   "pattern": "[ipv4-addr:value = '47.105.36.109']",
   "valid_from": "2026-09-29T00:00:00Z",
   "valid_until": "2026-10-29T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=47.105.36.109"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9a22cfbc-5da0-50b7-98ce-b81bc5bd7388",
   "created": "2026-09-18T00:00:00Z",
   "modified": "2026-10-18T00:00:00Z",
   "name": "47.121.130.18 (ipv4)",
   "pattern": "[ipv4-addr:value = '47.121.130.18']",
   "valid_from": "2026-09-18T00:00:00Z",
   "valid_until": "2026-10-18T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=47.121.130.18"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a4d4e46f-d7fb-57a2-a9d5-b7d5c71dadbf",
   "created": "2026-09-11T00:00:00Z",
   "modified": "2026-09-11T00:00:00Z",
   "name": "47.236.173.77 (ipv4)",
   "pattern": "[ipv4-addr:value = '47.236.173.77']",
   "valid_from": "2026-09-11T00:00:00Z",
   "valid_until": "2026-09-11T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=47.236.173.77"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c162ddc7-8e68-593c-8516-f670036ae551",
   "created": "2026-09-08T00:00:00Z",
   "modified": "2026-09-08T00:00:00Z",
   "name": "47.94.56.71 (ipv4)",
   "pattern": "[ipv4-addr:value = '47.94.56.71']",
   "valid_from": "2026-09-08T00:00:00Z",
   "valid_until": "2026-09-08T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=47.94.56.71"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3c0f629c-8f3d-55ce-82e0-8ab7aae6a34c",
   "created": "2026-10-04T00:00:00Z",
   "modified": "2026-11-03T00:00:00Z",
   "name": "49.0.202.115 (ipv4)",
   "pattern": "[ipv4-addr:value = '49.0.202.115']",
   "valid_from": "2026-10-04T00:00:00Z",
   "valid_until": "2026-11-03T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=49.0.202.115"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--917b512e-2839-55e4-abc9-6bdda9657164",
   "created": "2026-09-29T00:00:00Z",
   "modified": "2026-10-29T00:00:00Z",
   "name": "49.232.21.222 (ipv4)",
   "pattern": "[ipv4-addr:value = '49.232.21.222']",
   "valid_from": "2026-09-29T00:00:00Z",
   "valid_until": "2026-10-29T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=49.232.21.222"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e9fdb075-2dc0-5325-bc69-14be074c266e",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "51.91.190.241 (ipv4)",
   "pattern": "[ipv4-addr:value = '51.91.190.241']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=51.91.190.241"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1661bd77-6890-5ca8-80d1-7083a37ef5ea",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "51.91.190.242 (ipv4)",
   "pattern": "[ipv4-addr:value = '51.91.190.242']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=51.91.190.242"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--11218110-2941-5e8d-8c90-abc93c9e990d",
   "created": "2026-07-01T00:00:00Z",
   "modified": "2026-07-01T00:00:00Z",
   "name": "64.20.53.230 (ipv4)",
   "pattern": "[ipv4-addr:value = '64.20.53.230']",
   "valid_from": "2026-07-01T00:00:00Z",
   "valid_until": "2026-07-01T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=64.20.53.230"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--39b80afd-add9-5e45-b94d-cced0b88ae2b",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "64.62.156.162 (ipv4)",
   "pattern": "[ipv4-addr:value = '64.62.156.162']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=64.62.156.162"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--46709f2a-5ae7-5fa6-b65c-aac22d3160fc",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "64.62.156.222 (ipv4)",
   "pattern": "[ipv4-addr:value = '64.62.156.222']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=64.62.156.222"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9274fd75-a949-5d27-9398-3ce73ca35325",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "64.62.156.94 (ipv4)",
   "pattern": "[ipv4-addr:value = '64.62.156.94']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=64.62.156.94"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--efa60a63-4aaa-59db-9be7-ef3af1180bfc",
   "created": "2026-06-06T00:00:00Z",
   "modified": "2026-06-06T00:00:00Z",
   "name": "64.94.84.97 (ipv4)",
   "pattern": "[ipv4-addr:value = '64.94.84.97']",
   "valid_from": "2026-06-06T00:00:00Z",
   "valid_until": "2026-06-06T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=64.94.84.97"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fabbf47c-b90e-5607-95c5-dc4a827060b7",
   "created": "2026-09-02T00:00:00Z",
   "modified": "2026-09-02T00:00:00Z",
   "name": "65.109.70.162 (ipv4)",
   "pattern": "[ipv4-addr:value = '65.109.70.162']",
   "valid_from": "2026-09-02T00:00:00Z",
   "valid_until": "2026-09-02T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=65.109.70.162"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5f34f0a7-e600-51ef-a63a-61e2750d97a4",
   "created": "2026-06-09T00:00:00Z",
   "modified": "2026-06-09T00:00:00Z",
   "name": "66.42.99.200 (ipv4)",
   "pattern": "[ipv4-addr:value = '66.42.99.200']",
   "valid_from": "2026-06-09T00:00:00Z",
   "valid_until": "2026-06-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=66.42.99.200"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b5ec8131-7bab-5977-87ab-33a265608aa2",
   "created": "2024-10-24T00:00:00Z",
   "modified": "2024-10-24T00:00:00Z",
   "name": "77.247.126.158 (ipv4)",
   "pattern": "[ipv4-addr:value = '77.247.126.158']",
   "valid_from": "2024-10-24T00:00:00Z",
   "valid_until": "2024-10-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=77.247.126.158"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--120e6498-5a8e-57d5-987c-2668c74a3e89",
   "created": "2026-07-22T00:00:00Z",
   "modified": "2026-07-22T00:00:00Z",
   "name": "79.141.160.78 (ipv4)",
   "pattern": "[ipv4-addr:value = '79.141.160.78']",
   "valid_from": "2026-07-22T00:00:00Z",
   "valid_until": "2026-07-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=79.141.160.78"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c91dfa90-8f1e-5ef1-9d53-f3bc6ba16fd7",
   "created": "2026-07-27T00:00:00Z",
   "modified": "2026-07-27T00:00:00Z",
   "name": "8.19.75.217 (ipv4)",
   "pattern": "[ipv4-addr:value = '8.19.75.217']",
   "valid_from": "2026-07-27T00:00:00Z",
   "valid_until": "2026-07-27T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=8.19.75.217"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f61fc7c8-ae83-5fab-92cc-3aeb367c4f59",
   "created": "2026-06-20T00:00:00Z",
   "modified": "2026-06-20T00:00:00Z",
   "name": "85.11.187.8 (ipv4)",
   "pattern": "[ipv4-addr:value = '85.11.187.8']",
   "valid_from": "2026-06-20T00:00:00Z",
   "valid_until": "2026-06-20T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=85.11.187.8"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3706c8f5-15dd-5a89-8b05-082f6f53dbd0",
   "created": "2026-09-15T00:00:00Z",
   "modified": "2026-11-02T00:00:00Z",
   "name": "85.175.101.203 (ipv4)",
   "pattern": "[ipv4-addr:value = '85.175.101.203']",
   "valid_from": "2026-09-15T00:00:00Z",
   "valid_until": "2026-11-02T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=85.175.101.203"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--159826b7-4f97-511c-962a-dda4e321cfb7",
   "created": "2024-08-22T00:00:00Z",
   "modified": "2024-08-22T00:00:00Z",
   "name": "88.119.175.104 (ipv4)",
   "pattern": "[ipv4-addr:value = '88.119.175.104']",
   "valid_from": "2024-08-22T00:00:00Z",
   "valid_until": "2024-08-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=88.119.175.104"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b120af82-b327-5b90-99cd-b5738acaac48",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "88.214.21.183 (ipv4)",
   "pattern": "[ipv4-addr:value = '88.214.21.183']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=88.214.21.183"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--30b2bf54-bf82-59e1-a6c2-bd4ef298152e",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "89.116.171.182 (ipv4)",
   "pattern": "[ipv4-addr:value = '89.116.171.182']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=89.116.171.182"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cf07ba85-8cf1-5472-b8ad-fba1c5b8f6f6",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "89.117.94.35 (ipv4)",
   "pattern": "[ipv4-addr:value = '89.117.94.35']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=89.117.94.35"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ef90d776-8972-5cad-a448-17388bbbf4d4",
   "created": "2026-10-03T00:00:00Z",
   "modified": "2026-11-02T00:00:00Z",
   "name": "89.126.211.166 (ipv4)",
   "pattern": "[ipv4-addr:value = '89.126.211.166']",
   "valid_from": "2026-10-03T00:00:00Z",
   "valid_until": "2026-11-02T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=89.126.211.166"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2aa781aa-d515-5ed8-a848-2bf8fdb169c5",
   "created": "2026-09-09T00:00:00Z",
   "modified": "2026-09-09T00:00:00Z",
   "name": "9.20.4.14 (ipv4)",
   "pattern": "[ipv4-addr:value = '9.20.4.14']",
   "valid_from": "2026-09-09T00:00:00Z",
   "valid_until": "2026-09-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=9.20.4.14"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a00a5584-9955-5d83-b27a-133c3ab95ba0",
   "created": "2026-08-20T00:00:00Z",
   "modified": "2026-08-20T00:00:00Z",
   "name": "91.92.242.30 (ipv4)",
   "pattern": "[ipv4-addr:value = '91.92.242.30']",
   "valid_from": "2026-08-20T00:00:00Z",
   "valid_until": "2026-08-20T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=91.92.242.30"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1855269d-5c33-5a68-8cf5-f4f5afbb7f43",
   "created": "2026-09-14T00:00:00Z",
   "modified": "2026-09-14T00:00:00Z",
   "name": "92.63.180.133 (ipv4)",
   "pattern": "[ipv4-addr:value = '92.63.180.133']",
   "valid_from": "2026-09-14T00:00:00Z",
   "valid_until": "2026-09-14T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=92.63.180.133"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2b0a919b-d5c6-50e0-9e93-ddc6ed2b877c",
   "created": "2026-06-22T00:00:00Z",
   "modified": "2026-06-22T00:00:00Z",
   "name": "94.154.32.160 (ipv4)",
   "pattern": "[ipv4-addr:value = '94.154.32.160']",
   "valid_from": "2026-06-22T00:00:00Z",
   "valid_until": "2026-06-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=94.154.32.160"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--acaa90bf-1d3e-5f31-822e-89434e4d60ff",
   "created": "2026-09-28T00:00:00Z",
   "modified": "2026-10-28T00:00:00Z",
   "name": "96.62.224.81 (ipv4)",
   "pattern": "[ipv4-addr:value = '96.62.224.81']",
   "valid_from": "2026-09-28T00:00:00Z",
   "valid_until": "2026-10-28T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=96.62.224.81"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7dfdc8d2-1be7-523b-9491-30e8cf4f66eb",
   "created": "2026-09-09T00:00:00Z",
   "modified": "2026-11-12T00:00:00Z",
   "name": "cybersecurefox.com (domain)",
   "pattern": "[domain-name:value = 'cybersecurefox.com']",
   "valid_from": "2026-09-09T00:00:00Z",
   "valid_until": "2026-11-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 70,
   "x_tia_status": "active",
   "x_tia_confidence": "corroborated",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=cybersecurefox.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e60a2835-effb-5f59-96e5-06e0265e2548",
   "created": "2026-09-22T00:00:00Z",
   "modified": "2026-09-22T00:00:00Z",
   "name": "apply.fbijobs.gov (domain)",
   "pattern": "[domain-name:value = 'apply.fbijobs.gov']",
   "valid_from": "2026-09-22T00:00:00Z",
   "valid_until": "2026-09-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 70,
   "x_tia_status": "revoked",
   "x_tia_confidence": "corroborated",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=apply.fbijobs.gov"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--31aa0728-4432-594e-9885-792454f32828",
   "created": "2026-03-27T00:00:00Z",
   "modified": "2026-09-07T00:00:00Z",
   "name": "bigtlog.pipe (domain)",
   "pattern": "[domain-name:value = 'bigtlog.pipe']",
   "valid_from": "2026-03-27T00:00:00Z",
   "valid_until": "2026-09-07T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 70,
   "x_tia_status": "expired",
   "x_tia_confidence": "corroborated",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=bigtlog.pipe"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8a1609df-a7e2-59e1-9fcf-9c431272edcb",
   "created": "2026-09-03T00:00:00Z",
   "modified": "2026-09-08T00:00:00Z",
   "name": "registry.coder.com (domain)",
   "pattern": "[domain-name:value = 'registry.coder.com']",
   "valid_from": "2026-09-03T00:00:00Z",
   "valid_until": "2026-09-08T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 70,
   "x_tia_status": "expired",
   "x_tia_confidence": "corroborated",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=registry.coder.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2d081b81-cea6-5280-9284-b977efc392fd",
   "created": "2026-08-23T00:00:00Z",
   "modified": "2026-08-23T00:00:00Z",
   "name": "abacusadv.com (domain)",
   "pattern": "[domain-name:value = 'abacusadv.com']",
   "valid_from": "2026-08-23T00:00:00Z",
   "valid_until": "2026-08-23T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=abacusadv.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5c4098fb-c7c7-54fb-a2b9-04d23ea78b0c",
   "created": "2026-09-15T00:00:00Z",
   "modified": "2026-10-15T00:00:00Z",
   "name": "adminmenueditor.com (domain)",
   "pattern": "[domain-name:value = 'adminmenueditor.com']",
   "valid_from": "2026-09-15T00:00:00Z",
   "valid_until": "2026-10-15T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=adminmenueditor.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6b30e49f-f4ce-5b54-8415-ebbeceebac10",
   "created": "2026-08-27T00:00:00Z",
   "modified": "2026-08-27T00:00:00Z",
   "name": "ai-thermal.com (domain)",
   "pattern": "[domain-name:value = 'ai-thermal.com']",
   "valid_from": "2026-08-27T00:00:00Z",
   "valid_until": "2026-08-27T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=ai-thermal.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e39d0b7b-f710-5b62-a9eb-06c346088606",
   "created": "2026-08-24T00:00:00Z",
   "modified": "2026-08-24T00:00:00Z",
   "name": "alduncanson.react (domain)",
   "pattern": "[domain-name:value = 'alduncanson.react']",
   "valid_from": "2026-08-24T00:00:00Z",
   "valid_until": "2026-08-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=alduncanson.react"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--36e0d06d-2786-505f-b416-a78235497cf7",
   "created": "2026-08-10T00:00:00Z",
   "modified": "2026-08-10T00:00:00Z",
   "name": "analysis.abyssos (domain)",
   "pattern": "[domain-name:value = 'analysis.abyssos']",
   "valid_from": "2026-08-10T00:00:00Z",
   "valid_until": "2026-08-10T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=analysis.abyssos"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2ec91eeb-724b-5ebc-8af1-881c185e63ce",
   "created": "2026-08-05T00:00:00Z",
   "modified": "2026-08-05T00:00:00Z",
   "name": "api.claudeopus (domain)",
   "pattern": "[domain-name:value = 'api.claudeopus']",
   "valid_from": "2026-08-05T00:00:00Z",
   "valid_until": "2026-08-05T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=api.claudeopus"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--77d7b78a-fa42-51f6-be1a-a3759cc4f9d3",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "api.telegram.org (domain)",
   "pattern": "[domain-name:value = 'api.telegram.org']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=api.telegram.org"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c5c76f34-13d3-5184-9185-18af2ec03914",
   "created": "2026-09-01T00:00:00Z",
   "modified": "2026-09-01T00:00:00Z",
   "name": "api.virtualizor.com (domain)",
   "pattern": "[domain-name:value = 'api.virtualizor.com']",
   "valid_from": "2026-09-01T00:00:00Z",
   "valid_until": "2026-09-01T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=api.virtualizor.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--64b2c7e6-0915-5221-81d3-c653dd297f32",
   "created": "2026-10-08T00:00:00Z",
   "modified": "2026-11-07T00:00:00Z",
   "name": "api.weatherlive (domain)",
   "pattern": "[domain-name:value = 'api.weatherlive']",
   "valid_from": "2026-10-08T00:00:00Z",
   "valid_until": "2026-11-07T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=api.weatherlive"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4e218190-d23d-5323-b8a6-9cc0092bb47d",
   "created": "2026-05-23T00:00:00Z",
   "modified": "2026-05-23T00:00:00Z",
   "name": "autoload.files (domain)",
   "pattern": "[domain-name:value = 'autoload.files']",
   "valid_from": "2026-05-23T00:00:00Z",
   "valid_until": "2026-05-23T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=autoload.files"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8f88eeb8-36e9-5630-8cce-efc79d70dd2b",
   "created": "2026-06-23T00:00:00Z",
   "modified": "2026-06-23T00:00:00Z",
   "name": "avbuffer.free (domain)",
   "pattern": "[domain-name:value = 'avbuffer.free']",
   "valid_from": "2026-06-23T00:00:00Z",
   "valid_until": "2026-06-23T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=avbuffer.free"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9eed5ce8-724a-507b-b46d-dfd2de0ac5e7",
   "created": "2026-08-07T00:00:00Z",
   "modified": "2026-08-07T00:00:00Z",
   "name": "awqhnjewqjkl.icu (domain)",
   "pattern": "[domain-name:value = 'awqhnjewqjkl.icu']",
   "valid_from": "2026-08-07T00:00:00Z",
   "valid_until": "2026-08-07T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=awqhnjewqjkl.icu"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b06b2d6a-532a-54f2-a478-fe6d7cf55e9d",
   "created": "2026-06-11T00:00:00Z",
   "modified": "2026-06-11T00:00:00Z",
   "name": "azurenetfiles.net (domain)",
   "pattern": "[domain-name:value = 'azurenetfiles.net']",
   "valid_from": "2026-06-11T00:00:00Z",
   "valid_until": "2026-06-11T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=azurenetfiles.net"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b21b9b54-1da2-5d8b-aeca-d19a6ae90a6d",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "backblazeb2.com (domain)",
   "pattern": "[domain-name:value = 'backblazeb2.com']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=backblazeb2.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--aaf193f3-9b75-5b48-a338-70e51fe6ffd2",
   "created": "2026-06-16T00:00:00Z",
   "modified": "2026-06-16T00:00:00Z",
   "name": "backdoor.turn (domain)",
   "pattern": "[domain-name:value = 'backdoor.turn']",
   "valid_from": "2026-06-16T00:00:00Z",
   "valid_until": "2026-06-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=backdoor.turn"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b028fd0f-6f1f-55c9-99d6-063f6406a858",
   "created": "2026-09-01T00:00:00Z",
   "modified": "2026-09-01T00:00:00Z",
   "name": "brmconfig.com (domain)",
   "pattern": "[domain-name:value = 'brmconfig.com']",
   "valid_from": "2026-09-01T00:00:00Z",
   "valid_until": "2026-09-01T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=brmconfig.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--53c0ec60-da82-5423-a475-eccfe8b89316",
   "created": "2026-09-24T00:00:00Z",
   "modified": "2026-10-24T00:00:00Z",
   "name": "caldav.icloud (domain)",
   "pattern": "[domain-name:value = 'caldav.icloud']",
   "valid_from": "2026-09-24T00:00:00Z",
   "valid_until": "2026-10-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=caldav.icloud"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--110de7dd-8561-598d-8859-86ddceaa1388",
   "created": "2026-06-26T00:00:00Z",
   "modified": "2026-06-26T00:00:00Z",
   "name": "canal1zac1a.onrender.com (domain)",
   "pattern": "[domain-name:value = 'canal1zac1a.onrender.com']",
   "valid_from": "2026-06-26T00:00:00Z",
   "valid_until": "2026-06-26T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=canal1zac1a.onrender.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7a454d82-e002-5d5c-9811-2c598d9f2208",
   "created": "2026-08-10T00:00:00Z",
   "modified": "2026-08-10T00:00:00Z",
   "name": "capabilities.abyssos (domain)",
   "pattern": "[domain-name:value = 'capabilities.abyssos']",
   "valid_from": "2026-08-10T00:00:00Z",
   "valid_until": "2026-08-10T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=capabilities.abyssos"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6b3cd01c-151e-58f9-a9e6-fb75b18ecb17",
   "created": "2026-09-09T00:00:00Z",
   "modified": "2026-09-09T00:00:00Z",
   "name": "cdn.bloom (domain)",
   "pattern": "[domain-name:value = 'cdn.bloom']",
   "valid_from": "2026-09-09T00:00:00Z",
   "valid_until": "2026-09-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=cdn.bloom"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--7807167a-b4e9-51c1-8a63-016027ec08f2",
   "created": "2026-09-18T00:00:00Z",
   "modified": "2026-10-18T00:00:00Z",
   "name": "cdn10.sendibt1.com (domain)",
   "pattern": "[domain-name:value = 'cdn10.sendibt1.com']",
   "valid_from": "2026-09-18T00:00:00Z",
   "valid_until": "2026-10-18T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=cdn10.sendibt1.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4f24a9c1-151a-54bd-a002-87ccd4c81f10",
   "created": "2026-09-18T00:00:00Z",
   "modified": "2026-10-18T00:00:00Z",
   "name": "cdn11.sendibt1.com (domain)",
   "pattern": "[domain-name:value = 'cdn11.sendibt1.com']",
   "valid_from": "2026-09-18T00:00:00Z",
   "valid_until": "2026-10-18T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=cdn11.sendibt1.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--71d07017-02e7-5bdf-b674-83239ba39010",
   "created": "2026-09-18T00:00:00Z",
   "modified": "2026-10-18T00:00:00Z",
   "name": "cdn2.sendibt1.com (domain)",
   "pattern": "[domain-name:value = 'cdn2.sendibt1.com']",
   "valid_from": "2026-09-18T00:00:00Z",
   "valid_until": "2026-10-18T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=cdn2.sendibt1.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--89aacc8e-686f-5d49-8309-bc219114339f",
   "created": "2026-09-18T00:00:00Z",
   "modified": "2026-10-18T00:00:00Z",
   "name": "cdn4.sendibt1.com (domain)",
   "pattern": "[domain-name:value = 'cdn4.sendibt1.com']",
   "valid_from": "2026-09-18T00:00:00Z",
   "valid_until": "2026-10-18T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=cdn4.sendibt1.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--cacbe271-85d1-5c0c-afeb-868d5e19a518",
   "created": "2026-08-12T00:00:00Z",
   "modified": "2026-08-12T00:00:00Z",
   "name": "city-forum.com (domain)",
   "pattern": "[domain-name:value = 'city-forum.com']",
   "valid_from": "2026-08-12T00:00:00Z",
   "valid_until": "2026-08-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=city-forum.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1e972d22-6f30-5845-a02f-658b2c0d7222",
   "created": "2026-10-08T00:00:00Z",
   "modified": "2026-11-07T00:00:00Z",
   "name": "com.android.sys.bcprot (domain)",
   "pattern": "[domain-name:value = 'com.android.sys.bcprot']",
   "valid_from": "2026-10-08T00:00:00Z",
   "valid_until": "2026-11-07T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=com.android.sys.bcprot"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--65675e00-4e38-5adc-8070-9ec94bfb233b",
   "created": "2026-10-08T00:00:00Z",
   "modified": "2026-11-07T00:00:00Z",
   "name": "com.android.sys.gmsprot (domain)",
   "pattern": "[domain-name:value = 'com.android.sys.gmsprot']",
   "valid_from": "2026-10-08T00:00:00Z",
   "valid_until": "2026-11-07T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=com.android.sys.gmsprot"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6d9d3f10-6c50-5da2-bf8c-2d4e39b5ee9b",
   "created": "2026-10-08T00:00:00Z",
   "modified": "2026-11-07T00:00:00Z",
   "name": "com.android.sys.prot (domain)",
   "pattern": "[domain-name:value = 'com.android.sys.prot']",
   "valid_from": "2026-10-08T00:00:00Z",
   "valid_until": "2026-11-07T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=com.android.sys.prot"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c01aa0dd-9d4e-5f91-abdc-e10b84fb7b39",
   "created": "2026-10-08T00:00:00Z",
   "modified": "2026-11-07T00:00:00Z",
   "name": "com.android.system.lite (domain)",
   "pattern": "[domain-name:value = 'com.android.system.lite']",
   "valid_from": "2026-10-08T00:00:00Z",
   "valid_until": "2026-11-07T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=com.android.system.lite"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--755681e7-f5b5-500f-860b-2fda573e9328",
   "created": "2026-09-24T00:00:00Z",
   "modified": "2026-10-24T00:00:00Z",
   "name": "com.apple.finder.agent (domain)",
   "pattern": "[domain-name:value = 'com.apple.finder.agent']",
   "valid_from": "2026-09-24T00:00:00Z",
   "valid_until": "2026-10-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=com.apple.finder.agent"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a69ab9a9-bcf9-5e04-8b05-5725aa058108",
   "created": "2026-06-24T00:00:00Z",
   "modified": "2026-06-24T00:00:00Z",
   "name": "com.apple.system.services.activity (domain)",
   "pattern": "[domain-name:value = 'com.apple.system.services.activity']",
   "valid_from": "2026-06-24T00:00:00Z",
   "valid_until": "2026-06-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=com.apple.system.services.activity"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ffd4d0c5-e809-5acd-9a63-a390222964e5",
   "created": "2025-12-10T00:00:00Z",
   "modified": "2025-12-10T00:00:00Z",
   "name": "com.finder.helper.plist (domain)",
   "pattern": "[domain-name:value = 'com.finder.helper.plist']",
   "valid_from": "2025-12-10T00:00:00Z",
   "valid_until": "2025-12-10T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=com.finder.helper.plist"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--16441b9e-31d6-55f9-82e4-be95cada3ad8",
   "created": "2026-09-10T00:00:00Z",
   "modified": "2026-09-10T00:00:00Z",
   "name": "com.utils.launcher (domain)",
   "pattern": "[domain-name:value = 'com.utils.launcher']",
   "valid_from": "2026-09-10T00:00:00Z",
   "valid_until": "2026-09-10T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=com.utils.launcher"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--468ac173-53d6-528a-86cd-564242608847",
   "created": "2025-07-07T00:00:00Z",
   "modified": "2025-07-07T00:00:00Z",
   "name": "comfyupdate.org (domain)",
   "pattern": "[domain-name:value = 'comfyupdate.org']",
   "valid_from": "2025-07-07T00:00:00Z",
   "valid_until": "2025-07-07T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=comfyupdate.org"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ea9c7408-80a9-5a07-b514-548293f511bd",
   "created": "2026-08-10T00:00:00Z",
   "modified": "2026-08-10T00:00:00Z",
   "name": "communication.abyssos (domain)",
   "pattern": "[domain-name:value = 'communication.abyssos']",
   "valid_from": "2026-08-10T00:00:00Z",
   "valid_until": "2026-08-10T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=communication.abyssos"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6f248785-8170-5bbf-84fb-d7681772f189",
   "created": "2026-08-24T00:00:00Z",
   "modified": "2026-08-24T00:00:00Z",
   "name": "company.onmicrosoft.com (domain)",
   "pattern": "[domain-name:value = 'company.onmicrosoft.com']",
   "valid_from": "2026-08-24T00:00:00Z",
   "valid_until": "2026-08-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=company.onmicrosoft.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--91598d51-cc8e-5b9f-8d1d-175ac6a18d3e",
   "created": "2026-03-12T00:00:00Z",
   "modified": "2026-03-12T00:00:00Z",
   "name": "cre-ads.com (domain)",
   "pattern": "[domain-name:value = 'cre-ads.com']",
   "valid_from": "2026-03-12T00:00:00Z",
   "valid_until": "2026-03-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=cre-ads.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--45295901-fe30-589b-b572-801d68bf2b69",
   "created": "2026-08-24T00:00:00Z",
   "modified": "2026-08-24T00:00:00Z",
   "name": "daymath.mjs (domain)",
   "pattern": "[domain-name:value = 'daymath.mjs']",
   "valid_from": "2026-08-24T00:00:00Z",
   "valid_until": "2026-08-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=daymath.mjs"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--54877915-9289-5d95-849a-5160dfb347cf",
   "created": "2026-08-11T00:00:00Z",
   "modified": "2026-08-11T00:00:00Z",
   "name": "delivery.evidence (domain)",
   "pattern": "[domain-name:value = 'delivery.evidence']",
   "valid_from": "2026-08-11T00:00:00Z",
   "valid_until": "2026-08-11T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=delivery.evidence"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2dead9e8-ce43-5546-918d-2950d9774f0d",
   "created": "2026-06-26T00:00:00Z",
   "modified": "2026-06-26T00:00:00Z",
   "name": "driverx86-adobe.onrender.com (domain)",
   "pattern": "[domain-name:value = 'driverx86-adobe.onrender.com']",
   "valid_from": "2026-06-26T00:00:00Z",
   "valid_until": "2026-06-26T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=driverx86-adobe.onrender.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a25c4df5-388c-5f55-9660-b51453370946",
   "created": "2026-09-04T00:00:00Z",
   "modified": "2026-09-04T00:00:00Z",
   "name": "eeongous.com (domain)",
   "pattern": "[domain-name:value = 'eeongous.com']",
   "valid_from": "2026-09-04T00:00:00Z",
   "valid_until": "2026-09-04T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=eeongous.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--efae0859-0ba6-56e9-9a43-7ce5370b6939",
   "created": "2026-05-05T00:00:00Z",
   "modified": "2026-05-05T00:00:00Z",
   "name": "env-check.daemontools (domain)",
   "pattern": "[domain-name:value = 'env-check.daemontools']",
   "valid_from": "2026-05-05T00:00:00Z",
   "valid_until": "2026-05-05T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=env-check.daemontools"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e1e3e131-28f7-5d56-881f-1ac8dfb11014",
   "created": "2026-09-01T00:00:00Z",
   "modified": "2026-09-01T00:00:00Z",
   "name": "files.virtualizor.com (domain)",
   "pattern": "[domain-name:value = 'files.virtualizor.com']",
   "valid_from": "2026-09-01T00:00:00Z",
   "valid_until": "2026-09-01T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=files.virtualizor.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d3de8748-5678-5c1e-9c60-ed3932d8b90c",
   "created": "2026-09-24T00:00:00Z",
   "modified": "2026-10-24T00:00:00Z",
   "name": "gateway.icloud (domain)",
   "pattern": "[domain-name:value = 'gateway.icloud']",
   "valid_from": "2026-09-24T00:00:00Z",
   "valid_until": "2026-10-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=gateway.icloud"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--76716712-82a5-5295-bb6e-a19e4f63a66f",
   "created": "2026-08-12T00:00:00Z",
   "modified": "2026-08-12T00:00:00Z",
   "name": "git.churchofmalware (domain)",
   "pattern": "[domain-name:value = 'git.churchofmalware']",
   "valid_from": "2026-08-12T00:00:00Z",
   "valid_until": "2026-08-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=git.churchofmalware"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--12ca1fd5-1b1a-57b9-b6cc-24dcf77d6a14",
   "created": "2026-08-12T00:00:00Z",
   "modified": "2026-08-12T00:00:00Z",
   "name": "git.projectnightcrawler (domain)",
   "pattern": "[domain-name:value = 'git.projectnightcrawler']",
   "valid_from": "2026-08-12T00:00:00Z",
   "valid_until": "2026-08-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=git.projectnightcrawler"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--94f932f7-4bae-5128-a113-835b015af7c2",
   "created": "2026-08-14T00:00:00Z",
   "modified": "2026-08-14T00:00:00Z",
   "name": "github.aoitour (domain)",
   "pattern": "[domain-name:value = 'github.aoitour']",
   "valid_from": "2026-08-14T00:00:00Z",
   "valid_until": "2026-08-14T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=github.aoitour"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--613c2a13-91d0-522b-a8df-69e1ed22836c",
   "created": "2026-09-18T00:00:00Z",
   "modified": "2026-10-23T00:00:00Z",
   "name": "gogets.dev (domain)",
   "pattern": "[domain-name:value = 'gogets.dev']",
   "valid_from": "2026-09-18T00:00:00Z",
   "valid_until": "2026-10-23T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=gogets.dev"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--fceb8ac1-21bc-514f-9722-265938fd2e30",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "gs.thc.org (domain)",
   "pattern": "[domain-name:value = 'gs.thc.org']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=gs.thc.org"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--854c1854-afe9-5d7f-9407-49323b9aec02",
   "created": "2026-03-23T00:00:00Z",
   "modified": "2026-03-23T00:00:00Z",
   "name": "index-ap3.tyler2miler-proton-me-s-account.workers.dev (domain)",
   "pattern": "[domain-name:value = 'index-ap3.tyler2miler-proton-me-s-account.workers.dev']",
   "valid_from": "2026-03-23T00:00:00Z",
   "valid_until": "2026-03-23T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=index-ap3.tyler2miler-proton-me-s-account.workers.dev"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--445449a4-7918-529e-84d6-d3688d3e892d",
   "created": "2026-08-15T00:00:00Z",
   "modified": "2026-08-15T00:00:00Z",
   "name": "ipssrl.com (domain)",
   "pattern": "[domain-name:value = 'ipssrl.com']",
   "valid_from": "2026-08-15T00:00:00Z",
   "valid_until": "2026-08-15T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=ipssrl.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5707aed1-c6ab-583c-a782-6978136bbbd8",
   "created": "2026-09-18T00:00:00Z",
   "modified": "2026-09-19T00:00:00Z",
   "name": "itorrents.org (domain)",
   "pattern": "[domain-name:value = 'itorrents.org']",
   "valid_from": "2026-09-18T00:00:00Z",
   "valid_until": "2026-09-19T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "revoked",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=itorrents.org"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--2a5fb567-1347-55c2-aa8b-93941a4d2a54",
   "created": "2026-09-04T00:00:00Z",
   "modified": "2026-09-04T00:00:00Z",
   "name": "laboo.boo (domain)",
   "pattern": "[domain-name:value = 'laboo.boo']",
   "valid_from": "2026-09-04T00:00:00Z",
   "valid_until": "2026-09-04T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=laboo.boo"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e7d060b9-7839-52be-9261-967b4386ea08",
   "created": "2026-09-04T00:00:00Z",
   "modified": "2026-09-04T00:00:00Z",
   "name": "leappoach.info (domain)",
   "pattern": "[domain-name:value = 'leappoach.info']",
   "valid_from": "2026-09-04T00:00:00Z",
   "valid_until": "2026-09-04T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=leappoach.info"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6cb5988e-19f4-59a2-b654-ee699323deb3",
   "created": "2026-08-24T00:00:00Z",
   "modified": "2026-08-24T00:00:00Z",
   "name": "magne-sjaastad.opm (domain)",
   "pattern": "[domain-name:value = 'magne-sjaastad.opm']",
   "valid_from": "2026-08-24T00:00:00Z",
   "valid_until": "2026-08-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=magne-sjaastad.opm"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--3fec9311-90b3-55ce-a1b4-fb70ea543dec",
   "created": "2026-09-10T00:00:00Z",
   "modified": "2026-09-10T00:00:00Z",
   "name": "mail.uaiubifas (domain)",
   "pattern": "[domain-name:value = 'mail.uaiubifas']",
   "valid_from": "2026-09-10T00:00:00Z",
   "valid_until": "2026-09-10T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=mail.uaiubifas"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ca479595-2582-50bd-9871-042530ac3b75",
   "created": "2026-09-04T00:00:00Z",
   "modified": "2026-09-04T00:00:00Z",
   "name": "mythtime.xyz (domain)",
   "pattern": "[domain-name:value = 'mythtime.xyz']",
   "valid_from": "2026-09-04T00:00:00Z",
   "valid_until": "2026-09-04T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=mythtime.xyz"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a3f1c7db-13fc-51af-83df-e739718c9b55",
   "created": "2026-09-22T00:00:00Z",
   "modified": "2026-09-22T00:00:00Z",
   "name": "nightmare-stresser.com (domain)",
   "pattern": "[domain-name:value = 'nightmare-stresser.com']",
   "valid_from": "2026-09-22T00:00:00Z",
   "valid_until": "2026-09-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "revoked",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=nightmare-stresser.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--0e292e7b-0a2a-5742-8030-aa2c5bf31b42",
   "created": "2026-09-22T00:00:00Z",
   "modified": "2026-09-22T00:00:00Z",
   "name": "nightmarestresser.org (domain)",
   "pattern": "[domain-name:value = 'nightmarestresser.org']",
   "valid_from": "2026-09-22T00:00:00Z",
   "valid_until": "2026-09-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "revoked",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=nightmarestresser.org"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--f756797f-5b0b-574f-afe7-87797a11acef",
   "created": "2026-03-12T00:00:00Z",
   "modified": "2026-03-12T00:00:00Z",
   "name": "nqsaaskw.com (domain)",
   "pattern": "[domain-name:value = 'nqsaaskw.com']",
   "valid_from": "2026-03-12T00:00:00Z",
   "valid_until": "2026-03-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=nqsaaskw.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--afc449fa-c4cb-54c6-893d-235c2d786598",
   "created": "2026-09-01T00:00:00Z",
   "modified": "2026-09-01T00:00:00Z",
   "name": "openai-backup.one (domain)",
   "pattern": "[domain-name:value = 'openai-backup.one']",
   "valid_from": "2026-09-01T00:00:00Z",
   "valid_until": "2026-09-01T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=openai-backup.one"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8d61eb1f-8c90-58a2-bec6-912d8c702d47",
   "created": "2026-08-04T00:00:00Z",
   "modified": "2026-08-04T00:00:00Z",
   "name": "poison-claude.bitsender (domain)",
   "pattern": "[domain-name:value = 'poison-claude.bitsender']",
   "valid_from": "2026-08-04T00:00:00Z",
   "valid_until": "2026-08-04T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=poison-claude.bitsender"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--ffc71881-dd7d-58d5-bb00-1db2a7d4cb41",
   "created": "2026-08-27T00:00:00Z",
   "modified": "2026-08-27T00:00:00Z",
   "name": "pool.hashvault (domain)",
   "pattern": "[domain-name:value = 'pool.hashvault']",
   "valid_from": "2026-08-27T00:00:00Z",
   "valid_until": "2026-08-27T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=pool.hashvault"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b67e4fc7-7f4d-5adf-8aba-3b67b92bf566",
   "created": "2026-08-24T00:00:00Z",
   "modified": "2026-08-24T00:00:00Z",
   "name": "reliaquest.claims (domain)",
   "pattern": "[domain-name:value = 'reliaquest.claims']",
   "valid_from": "2026-08-24T00:00:00Z",
   "valid_until": "2026-08-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "revoked",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=reliaquest.claims"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8f32d357-830d-5a13-ab40-ea8f662be8f8",
   "created": "2026-08-12T00:00:00Z",
   "modified": "2026-08-12T00:00:00Z",
   "name": "review.chm (domain)",
   "pattern": "[domain-name:value = 'review.chm']",
   "valid_from": "2026-08-12T00:00:00Z",
   "valid_until": "2026-08-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=review.chm"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--c827443b-6b36-528a-bfc7-8790d66995f1",
   "created": "2026-08-24T00:00:00Z",
   "modified": "2026-08-24T00:00:00Z",
   "name": "rumbledb.jsoniq (domain)",
   "pattern": "[domain-name:value = 'rumbledb.jsoniq']",
   "valid_from": "2026-08-24T00:00:00Z",
   "valid_until": "2026-08-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=rumbledb.jsoniq"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e0628cc8-e39f-52b9-aaac-0cffe5bb68cf",
   "created": "2026-09-18T00:00:00Z",
   "modified": "2026-10-18T00:00:00Z",
   "name": "sendibt1.com (domain)",
   "pattern": "[domain-name:value = 'sendibt1.com']",
   "valid_from": "2026-09-18T00:00:00Z",
   "valid_until": "2026-10-18T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=sendibt1.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5edd29e3-edd4-5110-80f6-2ebb5eff2768",
   "created": "2026-06-08T00:00:00Z",
   "modified": "2026-06-08T00:00:00Z",
   "name": "setup.mdc (domain)",
   "pattern": "[domain-name:value = 'setup.mdc']",
   "valid_from": "2026-06-08T00:00:00Z",
   "valid_until": "2026-06-08T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=setup.mdc"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--a7aa210f-c60b-5886-a424-3132df06d534",
   "created": "2026-08-05T00:00:00Z",
   "modified": "2026-08-05T00:00:00Z",
   "name": "setup.mjs (domain)",
   "pattern": "[domain-name:value = 'setup.mjs']",
   "valid_from": "2026-08-05T00:00:00Z",
   "valid_until": "2026-08-05T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=setup.mjs"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--955aec55-f85d-5db9-84f8-9f993c00c219",
   "created": "2026-09-24T00:00:00Z",
   "modified": "2026-10-24T00:00:00Z",
   "name": "sphealth.aspx (domain)",
   "pattern": "[domain-name:value = 'sphealth.aspx']",
   "valid_from": "2026-09-24T00:00:00Z",
   "valid_until": "2026-10-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=sphealth.aspx"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--08cd08b2-bbbd-5c47-b70c-4bee9a099fbc",
   "created": "2026-09-11T00:00:00Z",
   "modified": "2026-09-11T00:00:00Z",
   "name": "stonevillenc.org (domain)",
   "pattern": "[domain-name:value = 'stonevillenc.org']",
   "valid_from": "2026-09-11T00:00:00Z",
   "valid_until": "2026-09-11T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=stonevillenc.org"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--1110231e-b809-5ac3-935e-0a643bbf1d7d",
   "created": "2025-07-07T00:00:00Z",
   "modified": "2025-07-07T00:00:00Z",
   "name": "synologyupdates.com (domain)",
   "pattern": "[domain-name:value = 'synologyupdates.com']",
   "valid_from": "2025-07-07T00:00:00Z",
   "valid_until": "2025-07-07T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=synologyupdates.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b624054a-5c0b-5255-b796-45cb7293bbd8",
   "created": "2026-07-08T00:00:00Z",
   "modified": "2026-07-10T00:00:00Z",
   "name": "sys.rzadmin.password (domain)",
   "pattern": "[domain-name:value = 'sys.rzadmin.password']",
   "valid_from": "2026-07-08T00:00:00Z",
   "valid_until": "2026-07-10T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=sys.rzadmin.password"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--397083aa-aa31-518e-b45d-e9d0afa67571",
   "created": "2026-08-15T00:00:00Z",
   "modified": "2026-08-15T00:00:00Z",
   "name": "tappercuddy.com (domain)",
   "pattern": "[domain-name:value = 'tappercuddy.com']",
   "valid_from": "2026-08-15T00:00:00Z",
   "valid_until": "2026-08-15T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=tappercuddy.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6f0d37d8-c702-5466-bc1c-40c8026dfa49",
   "created": "2026-05-02T00:00:00Z",
   "modified": "2026-10-23T00:00:00Z",
   "name": "third-party.com (domain)",
   "pattern": "[domain-name:value = 'third-party.com']",
   "valid_from": "2026-05-02T00:00:00Z",
   "valid_until": "2026-10-23T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=third-party.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--e1663cf4-071e-5757-95ab-b1f83f2f7c8d",
   "created": "2026-08-19T00:00:00Z",
   "modified": "2026-08-19T00:00:00Z",
   "name": "trainingannouncement.pdf.lnk (domain)",
   "pattern": "[domain-name:value = 'trainingannouncement.pdf.lnk']",
   "valid_from": "2026-08-19T00:00:00Z",
   "valid_until": "2026-08-19T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=trainingannouncement.pdf.lnk"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--dd9993cd-ce54-59cb-abee-f3b1e146ac1a",
   "created": "2026-08-24T00:00:00Z",
   "modified": "2026-08-24T00:00:00Z",
   "name": "trendaisecurity.com (domain)",
   "pattern": "[domain-name:value = 'trendaisecurity.com']",
   "valid_from": "2026-08-24T00:00:00Z",
   "valid_until": "2026-08-24T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=trendaisecurity.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--38fde457-3776-58c9-a89a-9686005b00b2",
   "created": "2026-03-12T00:00:00Z",
   "modified": "2026-03-12T00:00:00Z",
   "name": "userstat.net (domain)",
   "pattern": "[domain-name:value = 'userstat.net']",
   "valid_from": "2026-03-12T00:00:00Z",
   "valid_until": "2026-03-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=userstat.net"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5036a761-6068-59d0-817f-21947c70d40b",
   "created": "2026-09-14T00:00:00Z",
   "modified": "2026-09-14T00:00:00Z",
   "name": "usher.ttvnw (domain)",
   "pattern": "[domain-name:value = 'usher.ttvnw']",
   "valid_from": "2026-09-14T00:00:00Z",
   "valid_until": "2026-09-14T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=usher.ttvnw"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--4727b77b-743b-56ca-b289-c23480dfd856",
   "created": "2026-09-01T00:00:00Z",
   "modified": "2026-09-01T00:00:00Z",
   "name": "virtualizor.com (domain)",
   "pattern": "[domain-name:value = 'virtualizor.com']",
   "valid_from": "2026-09-01T00:00:00Z",
   "valid_until": "2026-09-01T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=virtualizor.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--bda9a343-3d9c-586a-bdcf-bbdc6d004e6a",
   "created": "2026-09-09T00:00:00Z",
   "modified": "2026-09-11T00:00:00Z",
   "name": "vlxx.arm (domain)",
   "pattern": "[domain-name:value = 'vlxx.arm']",
   "valid_from": "2026-09-09T00:00:00Z",
   "valid_until": "2026-09-11T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=vlxx.arm"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--30234edc-e48e-5ef8-bdc6-e3cf8f339081",
   "created": "2026-09-16T00:00:00Z",
   "modified": "2026-10-16T00:00:00Z",
   "name": "vultrobjects.com (domain)",
   "pattern": "[domain-name:value = 'vultrobjects.com']",
   "valid_from": "2026-09-16T00:00:00Z",
   "valid_until": "2026-10-16T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=vultrobjects.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--43b0c231-dfea-55e9-857a-18e1ed70fcdf",
   "created": "2026-06-26T00:00:00Z",
   "modified": "2026-06-26T00:00:00Z",
   "name": "weatherdataai.theworkpc.com (domain)",
   "pattern": "[domain-name:value = 'weatherdataai.theworkpc.com']",
   "valid_from": "2026-06-26T00:00:00Z",
   "valid_until": "2026-06-26T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=weatherdataai.theworkpc.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--8dd44f6a-7778-5ca4-828b-3cefbc37035f",
   "created": "2026-09-15T00:00:00Z",
   "modified": "2026-11-05T00:00:00Z",
   "name": "witha.name (domain)",
   "pattern": "[domain-name:value = 'witha.name']",
   "valid_from": "2026-09-15T00:00:00Z",
   "valid_until": "2026-11-05T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=witha.name"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--5bd2ceab-5bb9-500b-8578-4a61c151f8fa",
   "created": "2026-09-15T00:00:00Z",
   "modified": "2026-10-15T00:00:00Z",
   "name": "wp-user-consent.php (domain)",
   "pattern": "[domain-name:value = 'wp-user-consent.php']",
   "valid_from": "2026-09-15T00:00:00Z",
   "valid_until": "2026-10-15T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=wp-user-consent.php"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--00e2140e-1c43-5e43-a1da-17cdc98d0e3f",
   "created": "2026-07-17T00:00:00Z",
   "modified": "2026-07-19T00:00:00Z",
   "name": "wp2shell.com (domain)",
   "pattern": "[domain-name:value = 'wp2shell.com']",
   "valid_from": "2026-07-17T00:00:00Z",
   "valid_until": "2026-07-19T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=wp2shell.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--12b65cc3-58f6-565b-a02d-c6467028bc75",
   "created": "2026-03-12T00:00:00Z",
   "modified": "2026-03-12T00:00:00Z",
   "name": "xemphimlau.com (domain)",
   "pattern": "[domain-name:value = 'xemphimlau.com']",
   "valid_from": "2026-03-12T00:00:00Z",
   "valid_until": "2026-03-12T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=xemphimlau.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6ac26b59-14a0-574a-ad8f-10e43c98763f",
   "created": "2026-07-23T00:00:00Z",
   "modified": "2026-07-23T00:00:00Z",
   "name": "zimbra-metadata.com (domain)",
   "pattern": "[domain-name:value = 'zimbra-metadata.com']",
   "valid_from": "2026-07-23T00:00:00Z",
   "valid_until": "2026-07-23T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=zimbra-metadata.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--9cde9ab3-6edb-5433-8d8e-78ec8db83fb3",
   "created": "2025-12-22T00:00:00Z",
   "modified": "2025-12-22T00:00:00Z",
   "name": "zk-call-messenger-installer-3.9.2-lts.dmg (domain)",
   "pattern": "[domain-name:value = 'zk-call-messenger-installer-3.9.2-lts.dmg']",
   "valid_from": "2025-12-22T00:00:00Z",
   "valid_until": "2025-12-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "revoked",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=zk-call-messenger-installer-3.9.2-lts.dmg"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d82685f0-20f6-504f-8f7a-8cae6493bb71",
   "created": "2025-12-22T00:00:00Z",
   "modified": "2025-12-22T00:00:00Z",
   "name": "zkcall.net (domain)",
   "pattern": "[domain-name:value = 'zkcall.net']",
   "valid_from": "2025-12-22T00:00:00Z",
   "valid_until": "2025-12-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "revoked",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=zkcall.net"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--972b7435-72d1-5bc4-9fa4-d2c494e0f5ac",
   "created": "2026-07-23T00:00:00Z",
   "modified": "2026-07-23T00:00:00Z",
   "name": "zmailanalytics.com (domain)",
   "pattern": "[domain-name:value = 'zmailanalytics.com']",
   "valid_from": "2026-07-23T00:00:00Z",
   "valid_until": "2026-07-23T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=zmailanalytics.com"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6ee94d14-d6b6-55db-b78f-9c68f6309e71",
   "created": "2026-09-09T00:00:00Z",
   "modified": "2026-09-09T00:00:00Z",
   "name": "13382c16e2401b07451577b46e634b8031ec254d98b876e59692b5fa22abc1d4 (sha256)",
   "pattern": "[file:hashes.SHA-256 = '13382c16e2401b07451577b46e634b8031ec254d98b876e59692b5fa22abc1d4']",
   "valid_from": "2026-09-09T00:00:00Z",
   "valid_until": "2026-09-09T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=13382c16e2401b07451577b46e634b8031ec254d98b876e59692b5fa22abc1d4"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--979f6f07-719e-5066-b479-d522abe8a03a",
   "created": "2025-10-20T00:00:00Z",
   "modified": "2025-10-20T00:00:00Z",
   "name": "16df15306f966ae5c5184901747a32087483c03eebd7bf19dbfc38e2c4d23ff8 (sha256)",
   "pattern": "[file:hashes.SHA-256 = '16df15306f966ae5c5184901747a32087483c03eebd7bf19dbfc38e2c4d23ff8']",
   "valid_from": "2025-10-20T00:00:00Z",
   "valid_until": "2025-10-20T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=16df15306f966ae5c5184901747a32087483c03eebd7bf19dbfc38e2c4d23ff8"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--398bcd89-66e2-5e98-8ca1-37fed601603d",
   "created": "2026-09-07T00:00:00Z",
   "modified": "2026-09-07T00:00:00Z",
   "name": "26bd5b0722d1dbab5db749a063c49bc8638653ac2addfead7a9cb3d6d57bccc9 (sha256)",
   "pattern": "[file:hashes.SHA-256 = '26bd5b0722d1dbab5db749a063c49bc8638653ac2addfead7a9cb3d6d57bccc9']",
   "valid_from": "2026-09-07T00:00:00Z",
   "valid_until": "2026-09-07T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=26bd5b0722d1dbab5db749a063c49bc8638653ac2addfead7a9cb3d6d57bccc9"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6822f0ee-d377-52ad-9737-0ccc13890519",
   "created": "2026-08-18T00:00:00Z",
   "modified": "2026-08-18T00:00:00Z",
   "name": "321e1fb01eb3462b48ff6ccdef132acc1182e3f7456548439f0d4ead12fd98bf (sha256)",
   "pattern": "[file:hashes.SHA-256 = '321e1fb01eb3462b48ff6ccdef132acc1182e3f7456548439f0d4ead12fd98bf']",
   "valid_from": "2026-08-18T00:00:00Z",
   "valid_until": "2026-08-18T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=321e1fb01eb3462b48ff6ccdef132acc1182e3f7456548439f0d4ead12fd98bf"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--6cab7e0b-8a73-583c-a375-893ba9978abf",
   "created": "2026-09-21T00:00:00Z",
   "modified": "2026-10-21T00:00:00Z",
   "name": "8858ea412dc306b3558885af18006c5ca24689e8875733b5e13b3c2692e603cb (sha256)",
   "pattern": "[file:hashes.SHA-256 = '8858ea412dc306b3558885af18006c5ca24689e8875733b5e13b3c2692e603cb']",
   "valid_from": "2026-09-21T00:00:00Z",
   "valid_until": "2026-10-21T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=8858ea412dc306b3558885af18006c5ca24689e8875733b5e13b3c2692e603cb"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--b8d8b765-b747-50cc-8d2d-209cd647fe40",
   "created": "2026-09-22T00:00:00Z",
   "modified": "2026-10-22T00:00:00Z",
   "name": "bf0681e43f51e98fe7ec24bf73a43facc66b0feb325a3a835f8f01b2861b926e (sha256)",
   "pattern": "[file:hashes.SHA-256 = 'bf0681e43f51e98fe7ec24bf73a43facc66b0feb325a3a835f8f01b2861b926e']",
   "valid_from": "2026-09-22T00:00:00Z",
   "valid_until": "2026-10-22T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "active",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=bf0681e43f51e98fe7ec24bf73a43facc66b0feb325a3a835f8f01b2861b926e"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--d1bc3ed2-8049-58b6-a42c-889da30beb3d",
   "created": "2026-05-02T00:00:00Z",
   "modified": "2026-05-02T00:00:00Z",
   "name": "daf619aa8cc74dab02c360f46f9f4b7b1654ba478ee89992a3512a46f1f4c209 (sha256)",
   "pattern": "[file:hashes.SHA-256 = 'daf619aa8cc74dab02c360f46f9f4b7b1654ba478ee89992a3512a46f1f4c209']",
   "valid_from": "2026-05-02T00:00:00Z",
   "valid_until": "2026-05-02T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=daf619aa8cc74dab02c360f46f9f4b7b1654ba478ee89992a3512a46f1f4c209"
    }
   ]
  },
  {
   "type": "indicator",
   "spec_version": "2.1",
   "id": "indicator--237322ae-5a07-5eb2-bb83-9be48a29b489",
   "created": "2026-09-08T00:00:00Z",
   "modified": "2026-09-08T00:00:00Z",
   "name": "e37e3ddeeaaa9e0c4fdbcb829b4895a6521031c80053fc436625b61e6ee5b1a6 (sha256)",
   "pattern": "[file:hashes.SHA-256 = 'e37e3ddeeaaa9e0c4fdbcb829b4895a6521031c80053fc436625b61e6ee5b1a6']",
   "valid_from": "2026-09-08T00:00:00Z",
   "valid_until": "2026-09-08T00:00:00Z",
   "labels": [
    "malicious-activity"
   ],
   "confidence": 40,
   "x_tia_status": "expired",
   "x_tia_confidence": "reported",
   "external_references": [
    {
     "source_name": "Tia N. List",
     "url": "https://zarguell.github.io/tia-n-list/cti/iocs/?q=e37e3ddeeaaa9e0c4fdbcb829b4895a6521031c80053fc436625b61e6ee5b1a6"
    }
   ]
  }
 ]
}