When adding indicators, OTX usually auto-detects the type, but here is the breakdown so you can bulk-add them with context:
| Indicator | Type | Description |
|---|---|---|
api.aloparatoriuz.com | domain | Stage 1 TDS Gate (Initial Loader) |
volcatomix.com | domain | Stage 2 Payload Lure (Fake Cloudflare Host) |
stradisamplix.com | domain | Stage 3 Exfiltration C2 |
86.54.42.244 | IPv4 | Exfiltration C2 IP |
LokwiUHhajhWnbX | URI | Unique Script Path |
f48fbe39836779cadbf148b5952919fd | FileHash-MD5 | ClickFix Affiliate ID (passed in X-Bid header) |
Click to Open Code Editor