{
    "count": 39,
    "indicators": [
        {
            "ioc_value": "http:\/\/helix5lcfxwfqlmq4jegangp65v26mu5nv6jfqs465xj5kkszcyrl5yd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:45",
            "last_seen": "2026-08-06 19:47:45"
        },
        {
            "ioc_value": "http:\/\/helix5lcrpo7ddkq22ow2segws3tchqq6byqbhztvny77ua7rli6n7id.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:45",
            "last_seen": "2026-08-06 19:47:45"
        },
        {
            "ioc_value": "http:\/\/helixmr2bjll3lei56vhxrrwtdy3aehnlreqqpuwq64chtvqczxb3lqd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:45",
            "last_seen": "2026-08-06 19:47:45"
        },
        {
            "ioc_value": "http:\/\/helixmr2mr3hoaptz55hh74t4eobnzlsot4kdddahwdv7rognvsqk4yd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:45",
            "last_seen": "2026-08-06 19:47:45"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/sabinequarterly135\/Helix\/main\/frontend\/src\/lib\/Software_2.1.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/Abyssal-amicableness217\/create-helix-app\/main\/src\/security\/helix_create_app_3.7.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "global-helixapp.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 14:41:34",
            "last_seen": "2026-08-06 14:49:02"
        },
        {
            "ioc_value": "helix-original-131.vercel.app",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:58",
            "last_seen": "2026-08-06 14:48:53"
        },
        {
            "ioc_value": "helixsolutionhub.site",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:57",
            "last_seen": "2026-08-06 14:48:52"
        },
        {
            "ioc_value": "helixland-claim.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:52",
            "last_seen": "2026-08-06 14:48:45"
        },
        {
            "ioc_value": "helixrecords.drop-premint.xyz",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:51",
            "last_seen": "2026-08-06 14:48:44"
        },
        {
            "ioc_value": "helix.drop-premint.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:51",
            "last_seen": "2026-08-06 14:48:44"
        },
        {
            "ioc_value": "helixrecords.whitelist-web3.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:51",
            "last_seen": "2026-08-06 14:48:43"
        },
        {
            "ioc_value": "key-helix.xyz",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:50",
            "last_seen": "2026-08-06 14:48:43"
        },
        {
            "ioc_value": "helixmixer.co",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:51",
            "last_seen": "2026-08-06 14:48:43"
        },
        {
            "ioc_value": "helixmixer.io",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:51",
            "last_seen": "2026-08-06 14:48:43"
        },
        {
            "ioc_value": "helix.nft-whitelist.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:50",
            "last_seen": "2026-08-06 14:48:43"
        },
        {
            "ioc_value": "helix.nft-premints.xyz",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:51",
            "last_seen": "2026-08-06 14:48:43"
        },
        {
            "ioc_value": "helixmetaverse.land",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:50",
            "last_seen": "2026-08-06 14:48:42"
        },
        {
            "ioc_value": "https:\/\/www.crowdstrike.com\/blog\/meet-crowdstrikes-adversary-of-the-month-for-november-helix-kitten\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 8,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "helix-trade.live",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixavenue.fuelbtc.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixbeight.oakvillenorthendoscopy.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixcut.positivv.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixdiagnostics.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixtrade.net",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixvora-ai.live",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixvora-it.live",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixvora.digital",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixvora.live",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixvora.shop",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixvorai-de.live",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixvorai.live",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixvoratrade.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "helixvrelease.gosoutheastfoodservice.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:24",
            "last_seen": "2026-08-06 14:45:01"
        },
        {
            "ioc_value": "bellphelix.tumbleyardtoys.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "anthelixhub.click",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:11"
        },
        {
            "ioc_value": "alphahelixconsulting.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:34",
            "last_seen": "2026-08-06 14:42:10"
        },
        {
            "ioc_value": "ironhelixx.info",
            "ioc_type": "other",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:10:25",
            "last_seen": "2026-08-06 13:10:25"
        }
    ]
}