anchor.diff:      {ok, Bin} ->
         ioc2rpz_fun:logMessage("Source: ~p, size: ~s (~p), MD5: ~p ~n",[Source#source.name, ioc2rpz_fun:conv_to_Mb(byte_size(Bin)),byte_size(Bin), ioc2rpz_fun:bin_to_hexstr(crypto:hash(md5,Bin))]), %TODO debug
         %BinLow=ioc2rpz_fun:bin_to_lowcase(Bin),
  -      L=clean_feed(ioc2rpz_fun:split_tail(Bin,<<"\n">>),REGEX),
  +      L=[ {ioc2rpz_fun:bin_to_lowcase(X),Y} || {X,Y} <- clean_feed(ioc2rpz_fun:split_tail(Bin,<<"\n">>),REGEX) ],
         ioc2rpz_fun:logMessage("Source: ~p, got ~p indicators~n",[Source#source.name, length(L)]), %TODO debug
  -      [ {ioc2rpz_fun:bin_to_lowcase(X),Y} || {X,Y} <- L ];
  -      %L;
  +      L;
       {error, Reason} ->
         ioc2rpz_fun:logMessage("Error reading file ~p reason ~p ~n",[Filename, Reason]), %TODO debug
         []
  
positive.code:   Bin=list_to_binary(os:cmd(binary_to_list(CMD))), %, #{ max_size => ?ShellMaxRespSize }
    ioc2rpz_fun:logMessage("Source: ~p, size: ~s (~p), MD5: ~p ~n",[Source#source.name, ioc2rpz_fun:conv_to_Mb(byte_size(Bin)),byte_size(Bin), ioc2rpz_fun:bin_to_hexstr(crypto:hash(md5,Bin))]), %TODO debug
    %BinLow=ioc2rpz_fun:bin_to_lowcase(Bin),
    L=clean_feed(ioc2rpz_fun:split_tail(Bin,<<"\n">>),REGEX),
    ioc2rpz_fun:logMessage("Source: ~p, got ~p indicators~n",[Source#source.name, length(L)]), %TODO debug
    [ {ioc2rpz_fun:bin_to_lowcase(X),Y} || {X,Y} <- L ];
    %L;
  
  %get_ioc download IOCs from http/https/ftp
  get_ioc(<<Proto:5/bytes,_/binary>> = URL,REGEX,Source) when Proto == <<"http:">>;Proto == <<"https">>;Proto == <<"ftp:/">> ->
  
negative.code:   {ok,{{_,200,_},_,Response}} ->
      ioc2rpz_fun:logMessage("Source: ~p, size: ~s (~p), MD5: ~p ~n",[Source#source.name, ioc2rpz_fun:conv_to_Mb(byte_size(Response)), byte_size(Response), ioc2rpz_fun:bin_to_hexstr(crypto:hash(md5,Response))]), %TODO debug
      %BinLow=ioc2rpz_fun:bin_to_lowcase(Response),
      L=[ {ioc2rpz_fun:bin_to_lowcase(X),Y} || {X,Y} <- clean_feed(ioc2rpz_fun:split_tail(Response,<<"\n">>),REGEX) ],
      ioc2rpz_fun:logMessage("Source: ~p, got ~p indicators~n",[Source#source.name, length(L)]), %TODO debug
      L;
    {error,Reason} ->
      ioc2rpz_fun:logMessage("Error downloading feed ~p reason ~p ~n",[URL, Reason]), %TODO debug
      []
  