{
    "count": 37,
    "indicators": [
        {
            "ioc_value": "https:\/\/dfrlab.org\/2026\/06\/30\/two-coordinated-networks-one-domestic-one-foreign-target-the-same-philippine-facebook-pages\/",
            "ioc_type": "url",
            "category": "Disinformation",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:43",
            "last_seen": "2026-08-06 19:47:43"
        },
        {
            "ioc_value": "https:\/\/dfrlab.org\/2026\/03\/31\/foreign-and-domestic-information-manipulation-report\/",
            "ioc_type": "url",
            "category": "Disinformation",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:43",
            "last_seen": "2026-08-06 19:47:43"
        },
        {
            "ioc_value": "https:\/\/dfrlab.org\/2026\/03\/31\/polskanews-org-a-foreign-influence-operation-masquerading-as-polish-news\/",
            "ioc_type": "url",
            "category": "Disinformation",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:43",
            "last_seen": "2026-08-06 19:47:43"
        },
        {
            "ioc_value": "https:\/\/home.treasury.gov\/policy-issues\/financial-sanctions\/sanctions-programs-and-country-information\/russian-harmful-foreign-activities-sanctions#directives;",
            "ioc_type": "url",
            "category": "Sanctions",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:09:12",
            "last_seen": "2026-08-06 19:47:16"
        },
        {
            "ioc_value": "amesburyforeignauto.com",
            "ioc_type": "other",
            "category": "Malware Attribution",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:07:43",
            "last_seen": "2026-08-06 19:46:51"
        },
        {
            "ioc_value": "http:\/\/0000153.0000255.0000011.0000125\/httpswww.tcs.comwhat-we-doindustriespublic-servicessolutiontcs-sovereignsecure-cloudness.php",
            "ioc_type": "url",
            "category": "Malware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:46:47",
            "last_seen": "2026-08-06 19:46:47"
        },
        {
            "ioc_value": "http:\/\/107.173.9.85\/httpswww.tcs.comwhat-we-doindustriespublic-servicessolutiontcs-sovereignsecure-cloudness.php",
            "ioc_type": "url",
            "category": "Malware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:46:47",
            "last_seen": "2026-08-06 19:46:47"
        },
        {
            "ioc_value": "http:\/\/96.44.167.219\/httpswww.tcs.comwhat-we-doindustriespublic-servicessolutiontcs-sovereignsecure-cloud-ring.php",
            "ioc_type": "url",
            "category": "Malware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:46:46",
            "last_seen": "2026-08-06 19:46:46"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/MoeinAlvandi\/sovereign-vault\/main\/docker\/sovereign-vault-v2.7.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:44"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/FlareIgnis\/SQLBot\/main\/frontend\/src\/views\/chat\/component\/Bot_SQL_3.2.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/Shouryaf\/Foreign-Safety-Tourist-Travel-Web\/main\/src\/components\/DigitalPassport\/Travel_Tourist_Web_Safety_Foreign_v1.8.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "sovereignlabsjob.xyz",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:59",
            "last_seen": "2026-08-06 14:48:55"
        },
        {
            "ioc_value": "foreigncryptominers.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:54",
            "last_seen": "2026-08-06 14:48:47"
        },
        {
            "ioc_value": "foreigntradepros.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:47",
            "last_seen": "2026-08-06 14:48:39"
        },
        {
            "ioc_value": "https:\/\/web.archive.org\/web\/20201024230407\/https:\/\/www.fireeye.com\/blog\/threat-research\/2012\/12\/council-foreign-relations-water-hole-attack-details.html",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.welivesecurity.com\/en\/eset-research\/moustachedbouncer-espionage-against-foreign-diplomats-in-belarus\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 9,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/www.whitehouse.gov\/briefing-room\/statements-releases\/2021\/04\/15\/fact-sheet-imposing-costs-for-harmful-foreign-activities-by-the-russian-government\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "https:\/\/www.mandiant.com\/resources\/operation-ke3chang-targeted-attacks-against-ministries-of-foreign-affairs",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "ajxvdrjs.sovereignty2020.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:12",
            "last_seen": "2026-08-06 14:47:34"
        },
        {
            "ioc_value": "http:\/\/www.fireeye.com\/blog\/uncategorized\/2014\/02\/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html",
            "ioc_type": "url",
            "category": "Malware Families",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:03",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/www.bleepingcomputer.com\/news\/security\/cronix-cryptominer-kills-rivals-to-reign-supreme\/",
            "ioc_type": "url",
            "category": "Malware Families",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:03",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/www.foreignminister.gov.au\/minister\/marise-payne\/media-release\/australia-joins-international-partners-attribution-malicious-cyber-activity-china",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/medium.com\/cycraft\/taiwan-high-tech-ecosystem-targeted-by-foreign-apt-group-5473d2ad8730",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.cyjax.com\/the-hacktivist-response-to-uk-foreign-policy\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/eromang.zataz.com\/2012\/12\/29\/attack-and-ie-0day-informations-used-against-council-on-foreign-relations\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/yle.fi\/uutiset\/osasto\/news\/russian_group_behind_2013_foreign_ministry_hack\/8591548",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:59",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "foreignapexmargin.net",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:26",
            "last_seen": "2026-08-06 14:44:59"
        },
        {
            "ioc_value": "btcsovereignn970.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "btc-sovereignn970.live",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "pace-authors-productive-foreign.trycloudflare.com",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:11",
            "last_seen": "2026-08-06 14:43:53"
        },
        {
            "ioc_value": "modernizingforeignassistance.net",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:07",
            "last_seen": "2026-08-06 14:43:47"
        },
        {
            "ioc_value": "2311foreign.xyz",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:29",
            "last_seen": "2026-08-06 14:42:03"
        },
        {
            "ioc_value": "baggyreigncurriculum.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:43",
            "last_seen": "2026-08-06 14:41:11"
        },
        {
            "ioc_value": "bafkreign7vgcjm3i4p35efuhf33zb4x7ovzltdeaioq6tepnc5arb63hlq.ipfs.dweb.link",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:43",
            "last_seen": "2026-08-06 14:41:10"
        },
        {
            "ioc_value": "bafkreignj3o5ufkhqhanljsdg3pgcood6v4ot6jw7dwjcezaj6qyxxbl3m.ipfs.dweb.link",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:43",
            "last_seen": "2026-08-06 14:41:10"
        },
        {
            "ioc_value": "bafkreignr7h7nn2z6macmycdjjva4jq3rcwrcu4aidh3hsmu4iywvmt6bq.ipfs.dweb.link",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:43",
            "last_seen": "2026-08-06 14:41:10"
        },
        {
            "ioc_value": "aircraftreign.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:38",
            "last_seen": "2026-08-06 14:41:05"
        }
    ]
}