{
    "count": 60,
    "indicators": [
        {
            "ioc_value": "devcisco.com",
            "ioc_type": "other",
            "category": "Malware Attribution",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:07:44",
            "last_seen": "2026-08-12 00:08:24"
        },
        {
            "ioc_value": "plazasanfrancisco.com.gt",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:57",
            "last_seen": "2026-08-06 14:48:52"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/sec_conn_pki\/configuration\/xe-17\/sec-pki-xe-17-book\/sec-deploy-rsa-pki.html#GUID-1CB802D8-9DE3-447F-BECE-CF22F5E11436",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/fundamentals\/command\/cf_command_ref\/show_protocols_through_showmon.html#wp2760878733",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/tools.cisco.com\/security\/center\/resources\/integrity_assurance.html#23",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/security\/s1\/sec-s1-cr-book\/sec-cr-t2.html#wp1047035630",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/routers\/crs\/software\/crs_r5-1\/interfaces\/configuration\/guide\/hc51xcrsbook\/hc51span.html",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/fundamentals\/command\/cf_command_ref\/show_monitor_permit_list_through_show_process_memory.html#wp3599497760",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/security\/d1\/sec-d1-cr-book\/sec-cr-i3.html#wp1254331478",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/blogs.cisco.com\/security\/evolution-of-attacks-on-cisco-ios-devices",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/umbrella.cisco.com\/blog\/2016\/10\/10\/domain-generation-algorithms-effective\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/community.cisco.com\/t5\/security-blogs\/attackers-continue-to-target-legacy-devices\/ba-p\/4169954",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/support\/docs\/ios-nx-os-software\/ios-embedded-packet-capture\/116045-productconfig-epc-00.html",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/tools.cisco.com\/security\/center\/content\/CiscoAppliedMitigationBulletin\/cisco-amb-20080610-SNMPv3",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/fundamentals\/command\/cf_command_ref\/F_through_K.html#wp2829794668",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/netflow\/configuration\/15-mt\/nf-15-mt-book\/nf-detct-analy-thrts.pdf",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/blogs.cisco.com\/security\/talos\/opening-zxshell",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 7,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/fundamentals\/command\/cf_command_ref\/D_through_E.html#wp3557227463",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/switches\/datacenter\/nexus9000\/sw\/7-x\/fundamentals\/configuration\/guide\/b_Cisco_Nexus_9000_Series_NX-OS_Fundamentals_Configuration_Guide_7x\/b_Cisco_Nexus_9000_Series_NX-OS_Fundamentals_Configuration_Guide_7x_chapter_01000.html",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/security\/s1\/sec-s1-cr-book\/sec-cr-s5.html",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "http:\/\/blogs.cisco.com\/security\/h1n1-technical-analysis-reveals-new-capabilities",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/umbrella.cisco.com\/blog\/2015\/02\/18\/at-high-noon-algorithms-do-battle\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "http:\/\/blogs.cisco.com\/security\/talos\/threat-spotlight-group-72",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "tools.cisco.com",
            "ioc_type": "other",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:10:28",
            "last_seen": "2026-08-06 14:48:26"
        },
        {
            "ioc_value": "sec.cloudapps.cisco.com",
            "ioc_type": "other",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:10:28",
            "last_seen": "2026-08-06 14:48:26"
        },
        {
            "ioc_value": "www.cisco.com",
            "ioc_type": "other",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:10:28",
            "last_seen": "2026-08-06 14:48:26"
        },
        {
            "ioc_value": "amazonsanfrancisco.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:14",
            "last_seen": "2026-08-06 14:47:36"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/707\/ioshttpserver-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/770\/crmtmp-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/770\/iosdfsacl-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-19990819-dbaccess",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/770\/pixkey-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/770\/wccpauth-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/707\/catos-enable-bypass-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/univercd\/cc\/td\/doc\/product\/lan\/28201900\/1928v8x\/eescg8x\/aleakyv.htm",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/707\/iostelnetopt-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/707\/pixtcpreset-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/770\/7xxconn-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:25"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/707\/pixest-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:24"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/warp\/public\/770\/pixmgrfile-pub.shtml",
            "ioc_type": "url",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 4,
            "first_seen": "2026-08-06 13:10:33",
            "last_seen": "2026-08-06 14:44:24"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/about\/legal\/global-trade-legal-compliance\/general-export-compliance.html",
            "ioc_type": "url",
            "category": "IP Blocklists",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:21",
            "last_seen": "2026-08-06 14:44:01"
        },
        {
            "ioc_value": "http:\/\/www.cisco.com\/web\/siteassets\/legal\/privacy.html",
            "ioc_type": "url",
            "category": "IP Blocklists",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:21",
            "last_seen": "2026-08-06 14:44:01"
        },
        {
            "ioc_value": "api.webex.contact-cisco.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:12"
        },
        {
            "ioc_value": "api.webex.mediucisco.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:12"
        },
        {
            "ioc_value": "api.mediucisco.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:12"
        },
        {
            "ioc_value": "api.mediu-webex-cisco.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:12"
        },
        {
            "ioc_value": "appcisco.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:12"
        },
        {
            "ioc_value": "api.idbroker.mediu-webex-cisco.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:11"
        },
        {
            "ioc_value": "api.contact-cisco.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:11"
        },
        {
            "ioc_value": "876543secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:31",
            "last_seen": "2026-08-06 14:42:07"
        },
        {
            "ioc_value": "76543secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:30",
            "last_seen": "2026-08-06 14:42:06"
        },
        {
            "ioc_value": "6543secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:30",
            "last_seen": "2026-08-06 14:42:05"
        },
        {
            "ioc_value": "543secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:30",
            "last_seen": "2026-08-06 14:42:05"
        },
        {
            "ioc_value": "3secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:29",
            "last_seen": "2026-08-06 14:42:04"
        },
        {
            "ioc_value": "43secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:29",
            "last_seen": "2026-08-06 14:42:04"
        },
        {
            "ioc_value": "arabsanfrancisco.com",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:41",
            "last_seen": "2026-08-06 14:41:08"
        },
        {
            "ioc_value": "http:\/\/blogs.cisco.com\/security\/cryptxxx-technical-deep-dive",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/umbrella.cisco.com\/blog\/cybersecurity-threat-spotlight-blackmatter-lockbit-thor",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/blogs.cisco.com\/security\/talos\/wastedlocker-goes-big-game-hunting-in-2020",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/security\/cyber_vision\/publications\/Active-Discovery\/Release-4-3-0\/b_Cisco_Cyber_Vision_Active_Discovery_Configuration_Guide.pdf",
            "ioc_type": "url",
            "category": "ICS ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:09:23",
            "last_seen": "2026-08-06 13:09:23"
        }
    ]
}