{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/fakeagent-claude-sectoprat-malvertising-defense/",
    "fang": "live",
    "exported_at": "2026-07-23T20:04:05Z",
    "total": 41,
    "categories": 5
  },
  "iocs": {
    "IPv4": [
      "104.194.133.210",
      "107.189.17.143",
      "107.189.20.32",
      "107.189.20.95",
      "107.189.21.86",
      "107.189.22.118",
      "107.189.24.255",
      "107.189.24.67",
      "107.189.26.86",
      "191.101.80.211",
      "195.110.58.222",
      "2.24.131.246",
      "45.59.114.190",
      "45.59.117.145",
      "45.59.117.67",
      "45.59.122.134",
      "45.59.122.235",
      "45.59.122.82",
      "45.59.123.122",
      "45.59.124.17",
      "45.59.125.228"
    ],
    "Domains": [
      "5ca8758c-02d0-4a72-89c8-d468b66dda41.com",
      "Claude.ai",
      "claude.ai",
      "claude.ai.download-app.us",
      "download-app.us",
      "downloading-api.it",
      "downloading-api.it.com",
      "polse.us"
    ],
    "URLs": [
      "5ca8758c-02d0-4a72-89c8-d468b66dda41.com",
      "claude.ai/public/artifacts/ca456f1f-44c0-42af-b329-4f1c7534a877",
      "download-app.us",
      "it.com/html/claude/win",
      "polse.us"
    ],
    "sha256": [
      "1cd58cfba596da296ab1878d74023e00c399345a1b6c2a0e5446c53563f4e3bb",
      "1fe3646d27d286db8123297e06ae7badf3e26f352a04f91b6d82c28869a91664",
      "26bae4d7012bf59847ab4036a065419c3d4ca47e020479f55b3b2c6d0d21394a",
      "f8acb8f5cf88b77a4c27d7fd6856aa299bb178e85f9963c2fbd447d818da3ed0",
      "fd826215add30c1319eefa291b6eaf8ddfa7720cfe816c49aef6fe8a88de7939"
    ],
    "Ethereum Addresses": [
      "0xc1907d7be91f95903ad66d775c397302e7dd9228",
      "0xe012d0f34cde9b870e9d9ed566ea5f8fd9b92228"
    ]
  }
}