{
    "count": 139,
    "indicators": [
        {
            "ioc_value": "mazradioaurora.com",
            "ioc_type": "other",
            "category": "Malware Attribution",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:07:43",
            "last_seen": "2026-08-06 19:46:51"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/Lusterless-zerotolerance898\/Aurora\/main\/Examples\/AuroraExamples\/AuroraExamples\/Assets.xcassets\/AppIcon.appiconset\/Software-v2.1.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/filmy6584\/aurora-windmill\/main\/data\/windmill_aurora_v3.2-beta.4.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/kouroshkhan50\/aurora-dx-dmhuisma\/main\/recipes\/aurora-dx-dmhuisma-v3.4-beta.4.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:42"
        },
        {
            "ioc_value": "auroraproject.site",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:58",
            "last_seen": "2026-08-06 14:48:53"
        },
        {
            "ioc_value": "auroravortex.org",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:55",
            "last_seen": "2026-08-06 14:48:49"
        },
        {
            "ioc_value": "aurorapllus.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:52",
            "last_seen": "2026-08-06 14:48:45"
        },
        {
            "ioc_value": "arcofaurora.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:52",
            "last_seen": "2026-08-06 14:48:45"
        },
        {
            "ioc_value": "aurora-eth.pages.dev",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:49",
            "last_seen": "2026-08-06 14:48:42"
        },
        {
            "ioc_value": "http:\/\/www.intezer.com\/evidence-aurora-operation-still-active-supply-chain-attack-through-ccleaner\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "http:\/\/securityaffairs.co\/wordpress\/8528\/hacking\/elderwood-project-who-is-behind-op-aurora-and-ongoing-attacks.html",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "www.codeaurora.org",
            "ioc_type": "other",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:10:28",
            "last_seen": "2026-08-06 14:48:26"
        },
        {
            "ioc_value": "abounding-glen-aurora.glitch.me",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:10",
            "last_seen": "2026-08-06 14:47:31"
        },
        {
            "ioc_value": "https:\/\/www.symantec.com\/connect\/blogs\/trojanhydraq-incident-analysis-aurora-0-day-exploit",
            "ioc_type": "url",
            "category": "Malware Families",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:03",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/www.symantec.com\/connect\/blogs\/hydraq-aurora-attackers-back",
            "ioc_type": "url",
            "category": "Malware Families",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:03",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/www.ransomware.live\/group\/aurora",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:25",
            "last_seen": "2026-08-06 14:45:04"
        },
        {
            "ioc_value": "codewithaurora.click",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:22",
            "last_seen": "2026-08-06 14:44:55"
        },
        {
            "ioc_value": "bluetick-aurorafb-1001.vercel.app",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:17",
            "last_seen": "2026-08-06 14:44:54"
        },
        {
            "ioc_value": "aurora-accelerate.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-capital-ai.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-capital.digital",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-crossing.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-drift.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-fundt.net",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-leap.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-mist.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-motor.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-nuinvest.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-override.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-scholar.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "bjaurora.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:21",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurora-wallet.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorabloom-warden.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorabuildings.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 8,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "auroracapital.live",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "auroracapitaltrade.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "auroraclarity.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "auroradumpty.top",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorafieldstudio.digital",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorafundex.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "auroraharborgate.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "auroralink-it.live",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "auroraluzcasa.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorarendivo.net",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorariverunion.live",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorarlynn.net",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorastonehaven.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 8,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorastonehavenfar.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 8,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorastreamforge.digital",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "auroravaleforge.digital",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "auroravalleycrest.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aurorawoodlandcraft.info",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 8,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:44:53"
        },
        {
            "ioc_value": "aldi-uk.aurorabasket.shop",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:17",
            "last_seen": "2026-08-06 14:44:48"
        },
        {
            "ioc_value": "aldi-uk.auroragrocer.shop",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:17",
            "last_seen": "2026-08-06 14:44:48"
        },
        {
            "ioc_value": "aldi-uk.aurorapantry.shop",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:17",
            "last_seen": "2026-08-06 14:44:48"
        },
        {
            "ioc_value": "aldi-uk.aurorashelf.shop",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:17",
            "last_seen": "2026-08-06 14:44:48"
        },
        {
            "ioc_value": "aldi-uk.aurorastock.shop",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:17",
            "last_seen": "2026-08-06 14:44:48"
        },
        {
            "ioc_value": "aldi-uk.auroratill.shop",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:08:17",
            "last_seen": "2026-08-06 14:44:48"
        },
        {
            "ioc_value": "http:\/\/aurora.co.zw\/krrr\/lc\/koreee.html",
            "ioc_type": "url",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:07:54",
            "last_seen": "2026-08-06 14:44:06"
        },
        {
            "ioc_value": "fiberlike.aurorainiceland.com",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:10",
            "last_seen": "2026-08-06 14:43:52"
        },
        {
            "ioc_value": "aurora-mind.ru",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:07",
            "last_seen": "2026-08-06 14:43:48"
        },
        {
            "ioc_value": "back-trust-aurora.cluster-ctrjumtpbmf.mnl-east-2.timcorpnet.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:15"
        },
        {
            "ioc_value": "aurg7o.auroragrat.ru",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurora519.coupon9cabin.coupons",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroraadornjewelry.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroraagencies.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurorabazaar.games",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroraborealluz.com.br",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracipher.info",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub1.baby",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub1.cfd",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub1.homes",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub1.xyz",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub2.baby",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub2.cfd",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub2.lat",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub2.lol",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub2.mom",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub2.xyz",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub3.cfd",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub3.cyou",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub3.homes",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub3.lat",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub3.mom",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub4.cyou",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub4.homes",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroracloudhub5.cyou",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurora.com.gt",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurora.enra8evue7k.ru",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroraeusse.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurora-fm.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroraforge.art",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroraglasswind.pro",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroragutters.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurora-junkies.net",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurorapavilion.top",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurorastonespire.site",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurorasunny.asia",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroratrailmarketing.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroravm.info",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurorawenters.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "aurorawindwell.site",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "auroraworkandservices.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:37",
            "last_seen": "2026-08-06 14:42:14"
        },
        {
            "ioc_value": "4p.nextaurora.ink",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:29",
            "last_seen": "2026-08-06 14:42:04"
        },
        {
            "ioc_value": "1997aurora.top",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:28",
            "last_seen": "2026-08-06 14:42:02"
        },
        {
            "ioc_value": "idex.auroradapp.market",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:07",
            "last_seen": "2026-08-06 14:41:42"
        },
        {
            "ioc_value": "http:\/\/idex.auroradapp.market",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:07",
            "last_seen": "2026-08-06 14:41:42"
        },
        {
            "ioc_value": "idex.auroradao.market",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:07",
            "last_seen": "2026-08-06 14:41:42"
        },
        {
            "ioc_value": "http:\/\/idex.auroradao.market",
            "ioc_type": "url",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:07",
            "last_seen": "2026-08-06 14:41:42"
        },
        {
            "ioc_value": "aurorawallet.app",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "auroray.top",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurora.co.zw",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:20",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurora-care.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurora-d3.herokuapp.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurora-finanzen.ch",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurora-marijuana60369.blogpostie.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurora.dawn-904.workers.dev",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "auroraai.pages.dev",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurorac.club",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "auroracommunitycare.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "auroracryptrade-invest.net",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "auroradore.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "auroraesi.firebaseapp.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "auroraesi.web.app",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurorafoundation.com.hk",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "auroragold.live",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurorahjkkissie.pages.dev",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurorajk.top",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurorasolartechnologies.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "auroraspel.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "aurorastore.org",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "auroravillas336.weebly.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:42",
            "last_seen": "2026-08-06 14:41:09"
        },
        {
            "ioc_value": "app.library.mmb-legacy-dev.magiclabs-aurora.io",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:40",
            "last_seen": "2026-08-06 14:41:08"
        },
        {
            "ioc_value": "https:\/\/www.ransomlook.io\/group\/aurora",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:02",
            "last_seen": "2026-08-06 13:13:02"
        },
        {
            "ioc_value": "https:\/\/www.bleepstatic.com\/images\/news\/ransomware\/a\/aurora\/ransom-note.jpg",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/www.bleepstatic.com\/images\/news\/ransomware\/a\/aurora\/wallpaper.jpg",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/www.spamfighter.com\/News-21588-Aurora-Ransomware-Circulating-the-Cyber-Space.htm",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/www.bleepingcomputer.com\/news\/security\/aurora-zorro-ransomware-actively-being-distributed\/",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/id-ransomware.blogspot.com\/2018\/05\/aurora-ransomware.html",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        }
    ]
}