# Newline-separated indicator format # Format 1: type:value ipv4:192.168.1.100 domain:evil.com url:http://example.com/malicious hash:D41D8CD98F00B204E9800998ECF8427E email:attacker@evil.com # Format 2: Just values (one per line, specify type in UI) # 192.168.1.100 # evil.com # attacker@evil.com