Comment by snug

With your jq piped to jq, you could just pipe it within jq

curl https://twitter.threatintel.rocks/ --silent | jq -r '.malicious_urls | .[]'