{
  "Event": {
    "analysis": "1",
    "date": "2026-04-02",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-04-02",
    "publish_timestamp": "1775167202",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1775152849",
    "uuid": "0751fd85-ecbb-4204-8d19-2b662950290c",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "elf_bpfdoor",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:10+00:00",
        "timestamp": "1775152810",
        "to_ids": false,
        "type": "url",
        "uuid": "31acf880-c7fe-4c98-b766-8dd3ce5ea404",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a532117627e05b167cfbf0faf0a87d258d93eb1a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_bpfdoor",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:10+00:00",
        "timestamp": "1775152810",
        "to_ids": false,
        "type": "url",
        "uuid": "4ace9c44-b341-4575-8df7-89220ebac5da",
        "value": "https://www.rapid7.com/blog/post/new-whitepaper-stealthy-bpfdoor-variants-are-a-needle-that-looks-like-hay",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_bpfdoor",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:10+00:00",
        "timestamp": "1775152810",
        "to_ids": false,
        "type": "url",
        "uuid": "25562fac-cf6e-4e68-a1d2-7b2a11183267",
        "value": "https://www.virustotal.com/gui/file/195b98211d1ce968669a0740ca08d0ddcf03a2df03a47e2e70550f6c002b49e8/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_bpfdoor",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:10+00:00",
        "timestamp": "1775152810",
        "to_ids": false,
        "type": "url",
        "uuid": "51d15f14-38bf-4fdf-9714-45cdb600ceca",
        "value": "https://www.virustotal.com/gui/file/9ee77ed38e5bc69f841bdaba7c5e6c3bf30fd9ae94cd2e69f39834e9cec76e82/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_bpfdoor",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:10+00:00",
        "timestamp": "1775152811",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e98ad99-6e1b-4167-a693-471b7a933ed1",
        "value": "ntpd.casacam.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_bpfdoor",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:11+00:00",
        "timestamp": "1775152811",
        "to_ids": true,
        "type": "domain",
        "uuid": "35012ad7-8a56-41b2-8173-5b69b9dc7871",
        "value": "ntpupdate.ddnsgeek.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_bpfdoor",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:11+00:00",
        "timestamp": "1775152811",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9fc2542-46ab-4b85-885e-98615fbcfd74",
        "value": "ntpupdate.ygto.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_bpfdoor",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:11+00:00",
        "timestamp": "1775152811",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2075e42-97ef-49cf-a2c1-ba3137c7e0df",
        "value": "ntpussl.instanthq.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:11+00:00",
        "timestamp": "1775152811",
        "to_ids": false,
        "type": "url",
        "uuid": "75e7396f-035f-4b1c-b89e-90a419d2a87a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/003ea32aa17fcadeae04529f4bce9699e9054f6f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:11+00:00",
        "timestamp": "1775152811",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b6d60e9-6c91-44cb-988b-b93ace006eea",
        "value": "c2.bluec2ops.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:11+00:00",
        "timestamp": "1775152812",
        "to_ids": true,
        "type": "domain",
        "uuid": "53515dae-154b-4983-b226-3662d3beec19",
        "value": "c2.gue-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:12+00:00",
        "timestamp": "1775152812",
        "to_ids": true,
        "type": "domain",
        "uuid": "28a410ee-a556-42fd-bca6-dc76671a90fb",
        "value": "c2.gue-tech.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:12+00:00",
        "timestamp": "1775152812",
        "to_ids": true,
        "type": "domain",
        "uuid": "391c6b46-d04f-44e0-a06a-6caec07e5122",
        "value": "c2.jacobriggs.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:12+00:00",
        "timestamp": "1775152812",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cc3c224-0412-42bb-be88-fb4740a57aec",
        "value": "c2.shemaria.tech",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:12+00:00",
        "timestamp": "1775152812",
        "to_ids": true,
        "type": "domain",
        "uuid": "48e3e2d7-bf49-4ace-8ab4-ce71125af253",
        "value": "johnjenkins.servebeer.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:12+00:00",
        "timestamp": "1775152812",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6ecc5cb-c771-45dc-ab9f-91d488788a7d",
        "value": "lab2222.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:12+00:00",
        "timestamp": "1775152813",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1a48c75-4d54-43d3-92b4-dd9ed0617db1",
        "value": "pac2.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:13+00:00",
        "timestamp": "1775152813",
        "to_ids": true,
        "type": "domain",
        "uuid": "937b423d-762a-4ef2-a98f-cdd6a8eaa3f6",
        "value": "sino99xx.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:13+00:00",
        "timestamp": "1775152813",
        "to_ids": true,
        "type": "domain",
        "uuid": "64de17e1-deae-40ab-bca1-152602569353",
        "value": "thebeastdev.dk",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:13+00:00",
        "timestamp": "1775152813",
        "to_ids": false,
        "type": "url",
        "uuid": "c05fdbee-6ce8-4d3f-abe0-47299ca0b6c3",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b3982c2ff0e06b1ac390376789b6a001b022f2c2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:13+00:00",
        "timestamp": "1775152813",
        "to_ids": false,
        "type": "url",
        "uuid": "9f2716e9-527c-48bd-8440-93c4c075725f",
        "value": "https://x.com/malwrhunterteam/status/2039439398383583584",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:13+00:00",
        "timestamp": "1775152813",
        "to_ids": false,
        "type": "url",
        "uuid": "2d3e2699-1e28-4032-a85e-1406b755de7a",
        "value": "https://www.virustotal.com/gui/file/92ab54d8ddfe5a408bb519d720fd58b0745c405991e41ec420f9132cdce57e2f/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:13+00:00",
        "timestamp": "1775152813",
        "to_ids": false,
        "type": "url",
        "uuid": "cb0bb703-b799-4ff6-84c7-f436a409a14e",
        "value": "https://www.virustotal.com/gui/file/eb2db389d64987855fa5db905bbcb7b100f9d6c1699eaf5d846a98680feae1df/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:13+00:00",
        "timestamp": "1775152814",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "174cad5d-4b36-48c7-ba13-9a92480aafdb",
        "value": "103.79.79.21",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:14+00:00",
        "timestamp": "1775152814",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "7fd69ab6-46ba-4ce1-b62c-a55f88a384a4",
        "value": "157.245.154.189",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:14+00:00",
        "timestamp": "1775152814",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f8faf4a4-077c-4039-9edf-335274ed0fd0",
        "value": "175.198.83.251",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:14+00:00",
        "timestamp": "1775152814",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "a63213dd-7b0a-40a4-a9c0-fbb72d74cb5a",
        "value": "207.244.230.254",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:14+00:00",
        "timestamp": "1775152815",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "62bbbd8f-f510-4ec1-94d6-b04218057586",
        "value": "34.44.36.81",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:15+00:00",
        "timestamp": "1775152815",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4a5549c6-1725-4af3-8334-01f5192bb3e7",
        "value": "45.32.114.213",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:16+00:00",
        "timestamp": "1775152816",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "96f459b6-dd17-4644-b76a-ddaf49485445",
        "value": "60.208.108.50",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:16+00:00",
        "timestamp": "1775152816",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "7dac4df6-363f-475b-b4a6-20f37698fa3c",
        "value": "82.112.220.6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "glassworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:16+00:00",
        "timestamp": "1775152816",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8d40794-6927-484e-b6f9-f794cbf7197b",
        "value": "inection.n-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:16+00:00",
        "timestamp": "1775152816",
        "to_ids": false,
        "type": "url",
        "uuid": "dd7199c6-7e68-49a1-ab6d-4ba4800f0e61",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/38b6794b5ac1fb60f4c1a66d22eb5b5b6065a275",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:17+00:00",
        "timestamp": "1775152817",
        "to_ids": false,
        "type": "url",
        "uuid": "f068582f-ac11-4340-bd65-c49071e44a86",
        "value": "https://x.com/AlvieriD/status/2039608629314064484",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:17+00:00",
        "timestamp": "1775152817",
        "to_ids": true,
        "type": "domain",
        "uuid": "efd5fde0-791c-4d6e-b5b7-914c066605f3",
        "value": "shnyhntww34phqoa6dcgnvps2yu7dlwzmy5lkvejwjdo6z7bmgshzayd.onion",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "metasploit",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:17+00:00",
        "timestamp": "1775152817",
        "to_ids": false,
        "type": "url",
        "uuid": "cf192fb6-eace-4cf8-8cc3-9961d8e97f25",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5a639579be8d890372a9fc3b2e4c34f32a28f1e7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "metasploit",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:17+00:00",
        "timestamp": "1775152817",
        "to_ids": false,
        "type": "url",
        "uuid": "09fad4c3-4fa3-4d52-a63e-d641fd144ec2",
        "value": "https://x.com/smica83/status/2039427605825265938",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "metasploit",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:17+00:00",
        "timestamp": "1775152817",
        "to_ids": false,
        "type": "url",
        "uuid": "adbfb572-197b-402a-8031-3449cfb99df0",
        "value": "https://www.virustotal.com/gui/file/cb574adcec44a9b051269d23bd4567b876253c068c3b30835ff38aec85d49d55/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "metasploit",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:17+00:00",
        "timestamp": "1775152817",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d8eede36-8322-4024-8a54-169fa55eae98",
        "value": "166.70.207.2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "metasploit",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:17+00:00",
        "timestamp": "1775152818",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "50822b2a-da5d-44e7-9af7-bcb9287c51b2",
        "value": "79.137.206.33",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:18+00:00",
        "timestamp": "1775152818",
        "to_ids": false,
        "type": "url",
        "uuid": "e7107afe-d22f-4693-9c4b-229311e2da16",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/048173ed0a14985e2bf9baa611b3536c4d309f98",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:18+00:00",
        "timestamp": "1775152818",
        "to_ids": false,
        "type": "url",
        "uuid": "e24f342b-4837-44d8-b261-9eaaffce7a3f",
        "value": "https://x.com/smica83/status/2039660000709124179",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:18+00:00",
        "timestamp": "1775152818",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fc32af8-e8fb-48c7-b823-6cb9f800b784",
        "value": "requires-fortune-nutten-eligible.trycloudflare.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:18+00:00",
        "timestamp": "1775152818",
        "to_ids": false,
        "type": "url",
        "uuid": "89896008-7c78-47db-8bc8-a4f88b0034b9",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1e78ee2511d649ed04506c5fadb570a487d0b425",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:18+00:00",
        "timestamp": "1775152818",
        "to_ids": true,
        "type": "domain",
        "uuid": "2abfbb8e-8e61-4c0e-99c5-8a52d8593b4e",
        "value": "140-82-18-48.cprapid.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:18+00:00",
        "timestamp": "1775152819",
        "to_ids": true,
        "type": "domain",
        "uuid": "0755e85b-d045-485a-847a-dce1a4084308",
        "value": "agilemast3r.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:19+00:00",
        "timestamp": "1775152819",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4b3dddc-6454-4a51-bd44-f8696063d6fa",
        "value": "bridge.wales",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:19+00:00",
        "timestamp": "1775152819",
        "to_ids": true,
        "type": "domain",
        "uuid": "750ae021-cc26-4ef7-933c-8ed7946241c4",
        "value": "cnoocim.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:19+00:00",
        "timestamp": "1775152819",
        "to_ids": true,
        "type": "domain",
        "uuid": "16c2ea6c-b931-419a-ba38-bd889db689bf",
        "value": "dakatawebstick.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:19+00:00",
        "timestamp": "1775152819",
        "to_ids": true,
        "type": "domain",
        "uuid": "ceb56f8d-9867-403e-b2bb-164295182e61",
        "value": "geralnewlong.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:19+00:00",
        "timestamp": "1775152819",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e126c5c-248c-4091-b41a-59cb5ad838d3",
        "value": "laboburiba.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:19+00:00",
        "timestamp": "1775152819",
        "to_ids": true,
        "type": "domain",
        "uuid": "de03a7d2-6699-47f7-9d52-c56ebd71e8f0",
        "value": "logicalnewrestore.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:20+00:00",
        "timestamp": "1775152820",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0cfb805-8ef5-431d-8efa-6fb2c9dba9ac",
        "value": "uehfks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:20+00:00",
        "timestamp": "1775152820",
        "to_ids": false,
        "type": "url",
        "uuid": "aab7de8a-28ab-4965-93ee-b444a1b4830b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/d135102f5bd69324a8b7052f0c00d5d7c3232f2b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hak5cloud_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:20+00:00",
        "timestamp": "1775152820",
        "to_ids": true,
        "type": "domain",
        "uuid": "d198e03f-fa3c-4414-9061-22cebc1ed0d2",
        "value": "c2.desuper.ipv64.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:20+00:00",
        "timestamp": "1775152820",
        "to_ids": false,
        "type": "url",
        "uuid": "c5a07e02-72fb-420b-87d7-486c17913074",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/841ce6aeb7bc8c8ced4a745b2adad118b44ed08c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:20+00:00",
        "timestamp": "1775152820",
        "to_ids": true,
        "type": "domain",
        "uuid": "884e9d19-f18f-453c-b185-0dce8a7b4600",
        "value": "indiagov.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:20+00:00",
        "timestamp": "1775152820",
        "to_ids": true,
        "type": "domain",
        "uuid": "c65319f1-8b2b-4534-ae69-5ce4e0800dc8",
        "value": "indiagov.eu.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:20+00:00",
        "timestamp": "1775152821",
        "to_ids": false,
        "type": "url",
        "uuid": "c30f6158-a48c-4987-b0dd-2d88bdd83bdd",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/eb4789bd066a8e2a711a236d6cad025a2cd8f384",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:21+00:00",
        "timestamp": "1775152821",
        "to_ids": true,
        "type": "domain",
        "uuid": "41d6435c-e6c1-4130-8ba8-2da0027dafc0",
        "value": "browserupdate.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:21+00:00",
        "timestamp": "1775152821",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa943bfc-01a2-429a-a926-ab7a52f95f36",
        "value": "deepseadon.dad",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:21+00:00",
        "timestamp": "1775152821",
        "to_ids": true,
        "type": "domain",
        "uuid": "678238f5-5094-4497-948b-65fd81155e9f",
        "value": "pixel-grapheneos.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:21+00:00",
        "timestamp": "1775152821",
        "to_ids": true,
        "type": "domain",
        "uuid": "66f46f52-aa1c-44e0-a138-490a98d01a6c",
        "value": "gk.wtx-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:21+00:00",
        "timestamp": "1775152821",
        "to_ids": true,
        "type": "domain",
        "uuid": "a92c0fc2-15cb-4d42-874a-f44e41c252b4",
        "value": "wtx-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:21+00:00",
        "timestamp": "1775152822",
        "to_ids": false,
        "type": "url",
        "uuid": "74a0949c-a1a6-49b9-8c11-e5d1cc5ab18e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3c573f8b012d777811113ccdbba85544d0755a58",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:22+00:00",
        "timestamp": "1775152822",
        "to_ids": false,
        "type": "url",
        "uuid": "3dde9582-07f1-44b6-881d-65cf664d5f4e",
        "value": "https://x.com/__0XYC__/status/2039538772090753351",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:22+00:00",
        "timestamp": "1775152822",
        "to_ids": true,
        "type": "domain",
        "uuid": "e699360d-ec3b-4be1-ad71-a1eb887bf33e",
        "value": "ministry-gov.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:22+00:00",
        "timestamp": "1775152822",
        "to_ids": true,
        "type": "domain",
        "uuid": "aefc0a3f-0d5f-4f0a-976d-cf4df3df1145",
        "value": "gov.ministry-gov.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:22+00:00",
        "timestamp": "1775152822",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a76b1c5-af3e-4bad-97b0-a6f4e6e95a3f",
        "value": "estabiishment.gov.ministry-gov.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:22+00:00",
        "timestamp": "1775152822",
        "to_ids": false,
        "type": "url",
        "uuid": "9f2eca71-b74c-440a-988a-6ba28f8188c9",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f7c70a4da572e9e1edae3cd945b9f02c602844f6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:22+00:00",
        "timestamp": "1775152823",
        "to_ids": false,
        "type": "url",
        "uuid": "588e28ac-8fc8-4179-b7ed-c27d767f7c5b",
        "value": "https://x.com/smica83/status/2039636514326360417",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:23+00:00",
        "timestamp": "1775152823",
        "to_ids": false,
        "type": "url",
        "uuid": "31b44227-60bd-46c1-ac9b-c64c4a0a661d",
        "value": "https://x.com/mopisec/status/2039645160435503526",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:23+00:00",
        "timestamp": "1775152823",
        "to_ids": false,
        "type": "url",
        "uuid": "6b4e53bd-7d29-4e6b-9793-ea4735c81218",
        "value": "https://www.virustotal.com/gui/file/a059d70e4f9095f167bd34ea4dfdab33be8f599907daefbd05f2ba3f2d6302be/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:23+00:00",
        "timestamp": "1775152823",
        "to_ids": true,
        "type": "domain",
        "uuid": "79f777f3-504b-4292-b231-4dd5275f47fe",
        "value": "neurosurgeryx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:23+00:00",
        "timestamp": "1775152823",
        "to_ids": true,
        "type": "domain",
        "uuid": "77f29998-28f5-4ef3-b0c1-32a334d35aef",
        "value": "loadmn.z13.web.core.windows.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:23+00:00",
        "timestamp": "1775152823",
        "to_ids": false,
        "type": "url",
        "uuid": "3fa18e2c-0ead-4f99-a96c-116d0bb488cc",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/02c29d74efd24e71fae9aeafe5cc04b1a098eadd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:23+00:00",
        "timestamp": "1775152823",
        "to_ids": true,
        "type": "domain",
        "uuid": "7331e2c7-e811-4652-b76a-054036db1134",
        "value": "astralpacketcore4.pics",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:23+00:00",
        "timestamp": "1775152824",
        "to_ids": true,
        "type": "domain",
        "uuid": "6087b2d1-fbec-4687-bac2-84b156857d28",
        "value": "hyperdatamesh3.pics",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:24+00:00",
        "timestamp": "1775152824",
        "to_ids": true,
        "type": "domain",
        "uuid": "a00ce980-cd4a-4092-9a34-11925631d9d4",
        "value": "neuralstreamcore1.baby",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:24+00:00",
        "timestamp": "1775152824",
        "to_ids": true,
        "type": "domain",
        "uuid": "c916576d-7c31-4b6e-afd5-961231a9feea",
        "value": "orbitdatasync5.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:24+00:00",
        "timestamp": "1775152824",
        "to_ids": true,
        "type": "domain",
        "uuid": "e17eadf4-006a-4c0c-a56c-3d6918ef583f",
        "value": "orbitstreamvault5.mom",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:24+00:00",
        "timestamp": "1775152824",
        "to_ids": true,
        "type": "domain",
        "uuid": "abecb4a4-1827-4e80-9253-9d7c356fe90e",
        "value": "stellarnodehub2.mom",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:24+00:00",
        "timestamp": "1775152824",
        "to_ids": false,
        "type": "url",
        "uuid": "572174f5-51fa-418c-bb3b-d975a541f839",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ac450482d34b482bb4944039d7a467e1dc5d6126",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:24+00:00",
        "timestamp": "1775152825",
        "to_ids": true,
        "type": "domain",
        "uuid": "33a246e9-7c7c-4e48-9877-7685298727a3",
        "value": "astralpacketcore2.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:25+00:00",
        "timestamp": "1775152825",
        "to_ids": true,
        "type": "domain",
        "uuid": "aaa70f43-21c0-412c-bf47-33ac6e51dfcd",
        "value": "astralpacketcore2.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:25+00:00",
        "timestamp": "1775152825",
        "to_ids": true,
        "type": "domain",
        "uuid": "32498764-92b2-4894-88b2-9b49e1a4ced1",
        "value": "astralpacketcore4.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:25+00:00",
        "timestamp": "1775152825",
        "to_ids": true,
        "type": "domain",
        "uuid": "beb0f48a-d3f2-42e9-8c26-1e4a34f977fe",
        "value": "cosmicrelayhub1.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:25+00:00",
        "timestamp": "1775152825",
        "to_ids": true,
        "type": "domain",
        "uuid": "93d884c5-f38d-4443-96bf-b7c4bbb17f4f",
        "value": "hyperdatamesh3.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:25+00:00",
        "timestamp": "1775152825",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cc10659-d55a-4364-83bc-881315f152d7",
        "value": "hyperdatamesh5.homes",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:25+00:00",
        "timestamp": "1775152825",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d522607-7e92-4a7a-9d9a-9f98816b3c30",
        "value": "hyperdatamesh5.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:26+00:00",
        "timestamp": "1775152826",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b6e2e46-787e-47d8-ac49-8acd3ac7b100",
        "value": "nebulasyncforge1.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:26+00:00",
        "timestamp": "1775152826",
        "to_ids": true,
        "type": "domain",
        "uuid": "a72c2ec1-ce8c-4a47-8724-cebd3acb7c71",
        "value": "nebulasyncforge2.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:26+00:00",
        "timestamp": "1775152826",
        "to_ids": true,
        "type": "domain",
        "uuid": "caf3851a-f872-4174-bfc1-12b709047997",
        "value": "nebulasyncforge3.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:26+00:00",
        "timestamp": "1775152826",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0a84333-8738-4947-8ac3-a3702b02fa02",
        "value": "quantumcachegrid5.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:26+00:00",
        "timestamp": "1775152826",
        "to_ids": true,
        "type": "domain",
        "uuid": "99ab05a0-76b7-46e6-b0ee-28a93d7b44f9",
        "value": "stellarnodehub5.homes",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:26+00:00",
        "timestamp": "1775152826",
        "to_ids": true,
        "type": "domain",
        "uuid": "4307053e-bcdd-4635-b6c3-caf6e9442702",
        "value": "ultranodecluster3.baby",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:26+00:00",
        "timestamp": "1775152827",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a7e3b94-0da1-401c-bb78-d62f084a742e",
        "value": "ultranodecluster3.pics",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:27+00:00",
        "timestamp": "1775152827",
        "to_ids": false,
        "type": "url",
        "uuid": "42b1e701-48a8-453d-a12c-748c95f3528a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/88a1c46cb87feb0af650d3e564a42b951d80471d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:27+00:00",
        "timestamp": "1775152827",
        "to_ids": true,
        "type": "domain",
        "uuid": "29f6564e-f198-419b-859f-a6554c67c9a6",
        "value": "astralpacketcore3.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:27+00:00",
        "timestamp": "1775152827",
        "to_ids": true,
        "type": "domain",
        "uuid": "76651d28-ead1-449a-9fbc-370fb90c48fa",
        "value": "astralpacketcore5.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:27+00:00",
        "timestamp": "1775152827",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f28dba5-c31c-4d81-a866-081de560bf9d",
        "value": "astralpacketcore5.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:27+00:00",
        "timestamp": "1775152827",
        "to_ids": true,
        "type": "domain",
        "uuid": "cefc6fb8-8325-491c-8e1f-f782198e6831",
        "value": "quantumcachegrid2.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:27+00:00",
        "timestamp": "1775152828",
        "to_ids": true,
        "type": "domain",
        "uuid": "42d058bd-5728-4bd7-b545-73abbcc945ca",
        "value": "stellarbackupnode3.pics",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:28+00:00",
        "timestamp": "1775152828",
        "to_ids": true,
        "type": "domain",
        "uuid": "840a2bfc-205f-4af8-a48a-88619193b62f",
        "value": "ultranodecluster2.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:28+00:00",
        "timestamp": "1775152828",
        "to_ids": false,
        "type": "url",
        "uuid": "bf7619a8-9173-491e-bf3b-379cc6e978d4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1ce11945817019e5e4bee7917d355169de555b97",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:28+00:00",
        "timestamp": "1775152828",
        "to_ids": true,
        "type": "domain",
        "uuid": "4aa49342-ab61-42e6-ada8-03d6d31e6017",
        "value": "aifoundersacademy.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:28+00:00",
        "timestamp": "1775152828",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cfc1a4a-bbfc-41f2-bb1a-d06db1567894",
        "value": "astralpacketcore1.baby",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:28+00:00",
        "timestamp": "1775152828",
        "to_ids": true,
        "type": "domain",
        "uuid": "4abd9f0a-9920-4566-8515-7815961f301f",
        "value": "astralpacketcore2.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:28+00:00",
        "timestamp": "1775152829",
        "to_ids": true,
        "type": "domain",
        "uuid": "741cf5ac-49eb-4129-875a-b0486e483e1a",
        "value": "astralpacketcore3.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:29+00:00",
        "timestamp": "1775152829",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c7b116c-e160-4b9b-b469-9a6071e4dd69",
        "value": "automationvijay.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:29+00:00",
        "timestamp": "1775152829",
        "to_ids": true,
        "type": "domain",
        "uuid": "55b8a02c-2358-482b-a911-48ff1aac75dd",
        "value": "cfdai-sound.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:29+00:00",
        "timestamp": "1775152829",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e63720d-519a-4abe-bb3a-d011b7181da8",
        "value": "cosmicrelayhub3.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:29+00:00",
        "timestamp": "1775152829",
        "to_ids": true,
        "type": "domain",
        "uuid": "61dfa6f2-5992-4eb7-9307-3f999b987679",
        "value": "filealphaweave.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:29+00:00",
        "timestamp": "1775152829",
        "to_ids": true,
        "type": "domain",
        "uuid": "fae208d2-e81a-4493-a5a2-31a83f4f5799",
        "value": "filebinaryhaze.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:29+00:00",
        "timestamp": "1775152829",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e1601a0-1d18-4b2e-ae63-cdbd4f0a53db",
        "value": "fileomegaform.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:29+00:00",
        "timestamp": "1775152830",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9bd7cfc-c29e-460e-9d9e-3ca036127295",
        "value": "hyperdatamesh1.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:30+00:00",
        "timestamp": "1775152830",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfc21a0b-631c-403a-ae83-70c6bb5dc347",
        "value": "hyperdatamesh2.pics",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:30+00:00",
        "timestamp": "1775152830",
        "to_ids": true,
        "type": "domain",
        "uuid": "20b73b73-8913-40a6-93f8-f4f40483a3d6",
        "value": "meilanimacdonald.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:30+00:00",
        "timestamp": "1775152830",
        "to_ids": true,
        "type": "domain",
        "uuid": "72303117-fc8b-4051-b0bb-75bfb1396fb6",
        "value": "mood-archive.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:30+00:00",
        "timestamp": "1775152830",
        "to_ids": true,
        "type": "domain",
        "uuid": "26b9138d-3767-47c0-ae92-e3a4d674e087",
        "value": "music-logic.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:30+00:00",
        "timestamp": "1775152830",
        "to_ids": true,
        "type": "domain",
        "uuid": "db17c4c3-b84f-48cf-bc03-44d1d1400d32",
        "value": "nebulasyncforge1.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:30+00:00",
        "timestamp": "1775152831",
        "to_ids": true,
        "type": "domain",
        "uuid": "a87101e6-c78c-4343-90ed-e754d6fbe82c",
        "value": "nebulasyncforge2.baby",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:31+00:00",
        "timestamp": "1775152831",
        "to_ids": true,
        "type": "domain",
        "uuid": "57ada861-f6d9-4800-b2ff-8b8ef5163c05",
        "value": "nebulasyncforge5.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:31+00:00",
        "timestamp": "1775152831",
        "to_ids": true,
        "type": "domain",
        "uuid": "e41c7593-f541-4aa5-9307-3a940358402c",
        "value": "neuralstreamcore1.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:31+00:00",
        "timestamp": "1775152831",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ee3baff-42a6-44e3-aaad-7e299a90ee9b",
        "value": "neuralstreamcore3.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:31+00:00",
        "timestamp": "1775152831",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1fcdd28-33c6-453f-a3b6-1aa83b9274d6",
        "value": "neuralstreamcore3.mom",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:31+00:00",
        "timestamp": "1775152831",
        "to_ids": true,
        "type": "domain",
        "uuid": "91bac9cd-66dc-45ce-8d2c-49eae6c24df5",
        "value": "neuralstreamcore4.baby",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:31+00:00",
        "timestamp": "1775152831",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd4b1eef-b556-4048-92bc-2be2a9a9171b",
        "value": "neuralstreamcore5.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:32+00:00",
        "timestamp": "1775152832",
        "to_ids": true,
        "type": "domain",
        "uuid": "33ff4c49-4494-49e2-9977-acb0cee69c85",
        "value": "neuralstreamcore5.pics",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:32+00:00",
        "timestamp": "1775152832",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd1561aa-ecfc-44d7-9555-19fed15abccc",
        "value": "orbitdatasync2.baby",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:32+00:00",
        "timestamp": "1775152832",
        "to_ids": true,
        "type": "domain",
        "uuid": "b83ba759-6fdc-45cf-a6de-2ca80a7e0a52",
        "value": "orbitdatasync5.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:32+00:00",
        "timestamp": "1775152832",
        "to_ids": true,
        "type": "domain",
        "uuid": "138852b1-0763-4d1f-89e9-69d26bf64390",
        "value": "orbitstreamvault1.mom",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:32+00:00",
        "timestamp": "1775152833",
        "to_ids": true,
        "type": "domain",
        "uuid": "40f6d815-c563-4700-a39f-8111635f863a",
        "value": "procleanrobot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:33+00:00",
        "timestamp": "1775152833",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4070501-b9bf-4f63-adee-01346d9d2107",
        "value": "quantumcachegrid1.baby",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:33+00:00",
        "timestamp": "1775152833",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed8882bf-00ea-4c34-8cf8-bcd0488b99ff",
        "value": "quantumcachegrid1.mom",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:33+00:00",
        "timestamp": "1775152833",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe9877f6-781c-407c-9867-7e9ec00fee6e",
        "value": "quantumcachegrid1.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:33+00:00",
        "timestamp": "1775152833",
        "to_ids": true,
        "type": "domain",
        "uuid": "a567108b-0e58-4dba-86a7-0e6c0b5d4f89",
        "value": "quantumcachegrid2.pics",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:33+00:00",
        "timestamp": "1775152833",
        "to_ids": true,
        "type": "domain",
        "uuid": "b21857d7-25e0-43b2-8c52-00e0bd704ab7",
        "value": "quantumcachegrid4.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:33+00:00",
        "timestamp": "1775152833",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8810724-3813-4210-80d1-d29dff7caae0",
        "value": "quantumfluxgrid3.mom",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:34+00:00",
        "timestamp": "1775152834",
        "to_ids": true,
        "type": "domain",
        "uuid": "329874e4-bb15-4d7d-b694-cb2fa840c28e",
        "value": "quantumfluxgrid5.baby",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:34+00:00",
        "timestamp": "1775152834",
        "to_ids": true,
        "type": "domain",
        "uuid": "00c04ee3-05cf-4467-8145-e5f89a4654fb",
        "value": "stellarbackupnode1.mom",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:34+00:00",
        "timestamp": "1775152834",
        "to_ids": true,
        "type": "domain",
        "uuid": "66e1c961-ae1e-481d-b857-1d9c3cc7a52a",
        "value": "stellarbackupnode2.mom",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:34+00:00",
        "timestamp": "1775152834",
        "to_ids": true,
        "type": "domain",
        "uuid": "c19f452c-07f5-4cb6-9766-b2b3582b2e9f",
        "value": "stellarbackupnode3.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:34+00:00",
        "timestamp": "1775152834",
        "to_ids": true,
        "type": "domain",
        "uuid": "35acd7b9-ffb1-4082-b03e-00e63378ccb1",
        "value": "stellarbackupnode3.mom",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:34+00:00",
        "timestamp": "1775152834",
        "to_ids": true,
        "type": "domain",
        "uuid": "5330904f-5df2-42c7-833c-17e3972773e2",
        "value": "stellarnodehub1.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:34+00:00",
        "timestamp": "1775152835",
        "to_ids": true,
        "type": "domain",
        "uuid": "49b32400-ed4e-4aeb-8ba7-c02c25b8b64d",
        "value": "stellarnodehub2.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:35+00:00",
        "timestamp": "1775152835",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e6c83ce-d7df-45c1-8253-fd8385d52a6f",
        "value": "stellarnodehub5.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:35+00:00",
        "timestamp": "1775152835",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1cbafac-8311-433c-918d-fd6055895b23",
        "value": "stellarnodehub5.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:35+00:00",
        "timestamp": "1775152835",
        "to_ids": true,
        "type": "domain",
        "uuid": "1028a7df-560e-4424-897d-dc48aac78e4c",
        "value": "travel-insider-pro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:35+00:00",
        "timestamp": "1775152835",
        "to_ids": true,
        "type": "domain",
        "uuid": "742f06df-2c44-4053-b946-88b379612bd6",
        "value": "ultranodecluster2.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:35+00:00",
        "timestamp": "1775152835",
        "to_ids": true,
        "type": "domain",
        "uuid": "7950110e-01e3-4b73-ac15-3439e357e960",
        "value": "ultranodecluster3.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:35+00:00",
        "timestamp": "1775152836",
        "to_ids": true,
        "type": "domain",
        "uuid": "06980f82-5624-4632-86d6-ee95c35386bc",
        "value": "ultranodecluster4.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:36+00:00",
        "timestamp": "1775152836",
        "to_ids": true,
        "type": "domain",
        "uuid": "edca9573-ce99-43fa-8b43-5f30ef30b489",
        "value": "orbitstreamvault4.cfdai-sound.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "1312",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:36+00:00",
        "timestamp": "1775152836",
        "to_ids": false,
        "type": "url",
        "uuid": "6bd7a289-e411-42c7-9f75-1b760e39d15f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/becfa14068c7c6946fb8fc0d63efd7ea8229f7f9",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "1312",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:36+00:00",
        "timestamp": "1775152836",
        "to_ids": false,
        "type": "url",
        "uuid": "b42d00dd-89f3-4fce-977f-099311345f2f",
        "value": "https://www.linkedin.com/posts/daniel-b1_marsalek-pentagonstealer-stealer-share-7445412081270575104-EYBn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "1312",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:36+00:00",
        "timestamp": "1775152836",
        "to_ids": true,
        "type": "domain",
        "uuid": "01cbb8a5-f6aa-4e3c-876c-277edcaf6287",
        "value": "acabstealer.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "1312",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:36+00:00",
        "timestamp": "1775152836",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1b29d5f-47de-4241-ad8d-66556e0bb865",
        "value": "diegruppe.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "1312",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:36+00:00",
        "timestamp": "1775152836",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef7cf205-b698-42d9-afc3-c3ff7e059309",
        "value": "limbo100x.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "1312",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:36+00:00",
        "timestamp": "1775152837",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e294ebf-f3b9-418f-928d-a52a5310b77f",
        "value": "marsalek.cy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "1312",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:37+00:00",
        "timestamp": "1775152837",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1dcc1b1-6c28-4fd8-b8de-ff702a80ced6",
        "value": "mineflayerapi.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:37+00:00",
        "timestamp": "1775152837",
        "to_ids": false,
        "type": "url",
        "uuid": "1d001fec-4a1c-4f9f-97e6-d21c4a15bf45",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ddc00d20b913f309dc37af372df333f6663dab5e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:37+00:00",
        "timestamp": "1775152837",
        "to_ids": false,
        "type": "url",
        "uuid": "bd33734d-da39-43df-ac67-92b833c34a28",
        "value": "https://www.virustotal.com/gui/file/dfe1ed1d4100e7ab6f27a56462f8572776e2f690c1314973c4328a0a6ad01eaa/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:37+00:00",
        "timestamp": "1775152837",
        "to_ids": false,
        "type": "url",
        "uuid": "22fc4992-9c6f-418f-91f3-d28f665ada84",
        "value": "https://www.virustotal.com/gui/file/ab08270277983338cceb19a46210e1471cc2d5cd324322d649b2d4dfa020bf2a/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:37+00:00",
        "timestamp": "1775152837",
        "to_ids": true,
        "type": "domain",
        "uuid": "da37e058-ee18-4dd6-bb14-6332bee77797",
        "value": "s435vasdbdagfsadfsavcsavas.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:37+00:00",
        "timestamp": "1775152838",
        "to_ids": true,
        "type": "domain",
        "uuid": "e08f730e-600c-40b7-9bae-b910dae1cba1",
        "value": "safsa4sadfsavcsavas.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:38+00:00",
        "timestamp": "1775152838",
        "to_ids": true,
        "type": "domain",
        "uuid": "500d7a60-703f-4b46-abee-ee1edffbc7d7",
        "value": "safsava1savas.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:38+00:00",
        "timestamp": "1775152838",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f99a24d-7735-4890-9ded-354a0690d591",
        "value": "safsavasdbda4avcsavas.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "teampcp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:38+00:00",
        "timestamp": "1775152838",
        "to_ids": false,
        "type": "url",
        "uuid": "30c2e827-04e9-48a9-89a2-2579620e9798",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/343713926f4df83c9a5becee67c18ab026e3d4de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "teampcp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:38+00:00",
        "timestamp": "1775152838",
        "to_ids": true,
        "type": "domain",
        "uuid": "fffd0695-05b5-4b8f-9a6b-f06c71d3bb2b",
        "value": "model.litellm.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:38+00:00",
        "timestamp": "1775152838",
        "to_ids": false,
        "type": "url",
        "uuid": "430c2b40-dfa5-434e-9abc-662550630797",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e0cc198d6bf65eeed27674605967360d345d557e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:38+00:00",
        "timestamp": "1775152838",
        "to_ids": true,
        "type": "domain",
        "uuid": "5335ee3f-1f5f-402a-b9ab-7b23557e418c",
        "value": "szprize.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:39+00:00",
        "timestamp": "1775152839",
        "to_ids": false,
        "type": "url",
        "uuid": "c7b295fe-de55-4dda-9535-89975fc9361e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/23003f3dd90e6b73056c13a9b3be3fb09eccab8c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:39+00:00",
        "timestamp": "1775152839",
        "to_ids": false,
        "type": "url",
        "uuid": "c31e29bd-6d63-4b34-b21e-c42d7cc1804e",
        "value": "https://www.virustotal.com/gui/file/1291cc6ef5d855a28a33c9ba1adcae8e5ac372b0e6e50d9de7af77db2b0deaca/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:39+00:00",
        "timestamp": "1775152839",
        "to_ids": true,
        "type": "domain",
        "uuid": "a03367eb-6e3b-4051-96ec-0a5650c0ba4a",
        "value": "admob-gmats.uc.r.appspot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:39+00:00",
        "timestamp": "1775152839",
        "to_ids": true,
        "type": "domain",
        "uuid": "d873d6ef-f96d-4994-9d89-0deff687aaeb",
        "value": "launcher.szprize.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:39+00:00",
        "timestamp": "1775152839",
        "to_ids": false,
        "type": "url",
        "uuid": "c39c0d68-1a59-4974-bf2c-4388c3a8b841",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e622d83c8af4c182b47c6596cc0d309f975a57ce",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:39+00:00",
        "timestamp": "1775152839",
        "to_ids": false,
        "type": "url",
        "uuid": "3ce570ad-d987-402b-84a3-dd051856866e",
        "value": "https://www.virustotal.com/gui/file/003051e26df0ccebed16ef2210f3fe417aa542ee8ca96cfb73244c22365abad6/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:39+00:00",
        "timestamp": "1775152840",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "ead2ff94-5443-4ac6-8050-07d79117e16c",
        "value": "176.125.254.204",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:40+00:00",
        "timestamp": "1775152840",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d9d369c8-e6b0-43f5-b3d8-8bba53061742",
        "value": "185.100.157.51",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:40+00:00",
        "timestamp": "1775152840",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "a5cf0996-7874-4126-bb5b-1b35370ab66f",
        "value": "193.111.117.70",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:40+00:00",
        "timestamp": "1775152840",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "dce9afd2-d15a-472e-abb8-e0e34a293dfa",
        "value": "213.176.79.8",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:40+00:00",
        "timestamp": "1775152840",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "85d9dee5-57e7-4c1c-aade-efe6218b03b0",
        "value": "64.188.79.232",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "python_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:40+00:00",
        "timestamp": "1775152840",
        "to_ids": false,
        "type": "url",
        "uuid": "06499855-028f-4018-aa98-b7d01e808059",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/865976715dc0e0475c2e36c4cb873e3f0e934f0f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "python_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:40+00:00",
        "timestamp": "1775152841",
        "to_ids": false,
        "type": "url",
        "uuid": "a03134d0-3912-4358-a1a9-5da6b448feda",
        "value": "https://x.com/1ZRR4H/status/2039587805450420534",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "python_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:41+00:00",
        "timestamp": "1775152841",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f64f7f30-0798-4ecb-880b-c9e2a74f8796",
        "value": "111.90.158.78",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:41+00:00",
        "timestamp": "1775152841",
        "to_ids": false,
        "type": "url",
        "uuid": "b6148db0-e585-4992-97ec-0a65dba52c69",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4c6d86a76a804d92ea8d90d1ef9af3484de7becb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:41+00:00",
        "timestamp": "1775152841",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ff4590a-b1a9-41d7-b1f8-c1914b681b9b",
        "value": "windspring.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:41+00:00",
        "timestamp": "1775152841",
        "to_ids": false,
        "type": "url",
        "uuid": "dd8ac9f0-dff6-44da-97a1-c0f2dd3948b7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/40e5b0c15a3627764183b24903fe8b6e0c3d92fb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:41+00:00",
        "timestamp": "1775152841",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f878eaa-1e66-4324-99ec-6be46bdc55bd",
        "value": "1-apaylo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:41+00:00",
        "timestamp": "1775152842",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa06d466-04fa-4f9f-afa0-0fa05e23a898",
        "value": "cerumo.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:42+00:00",
        "timestamp": "1775152842",
        "to_ids": true,
        "type": "domain",
        "uuid": "9022cfa0-21d6-4f5a-8a9a-da8e61e5c838",
        "value": "fluxnet.life",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:42+00:00",
        "timestamp": "1775152842",
        "to_ids": true,
        "type": "domain",
        "uuid": "f38812ff-74c2-4814-81a2-fa98ddb53d3b",
        "value": "luminer.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:42+00:00",
        "timestamp": "1775152842",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe507f60-df68-421a-87e4-df6e18dee955",
        "value": "millersteel.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:42+00:00",
        "timestamp": "1775152842",
        "to_ids": true,
        "type": "domain",
        "uuid": "1687f5f9-5c7a-4d4d-9ad7-f22f3bab5fad",
        "value": "publisherresolution.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:42+00:00",
        "timestamp": "1775152842",
        "to_ids": true,
        "type": "domain",
        "uuid": "50be461a-7faa-40db-8ab1-f7df310123d1",
        "value": "scooplacrosse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:42+00:00",
        "timestamp": "1775152843",
        "to_ids": false,
        "type": "url",
        "uuid": "f72d4758-dabe-4bf2-9058-b4f715323fde",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/51d6ba8af60a3a13cef2c5908667f79cac305d52",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:43+00:00",
        "timestamp": "1775152843",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "3729eed1-ef7b-4a27-8992-a227d33f83b6",
        "value": "149.104.78.245",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:43+00:00",
        "timestamp": "1775152843",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "fc7d15af-85c9-476b-a33c-8070d73a6b50",
        "value": "154.40.48.111",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:43+00:00",
        "timestamp": "1775152843",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e45b7d95-22e7-48ca-81de-afdfc819ed02",
        "value": "168.93.224.183",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:43+00:00",
        "timestamp": "1775152843",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e3664d70-8238-4549-ae29-6ae955eafa45",
        "value": "47.238.118.2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:43+00:00",
        "timestamp": "1775152843",
        "to_ids": false,
        "type": "url",
        "uuid": "91011414-a3ef-45c8-8cad-1044be9d0273",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/249192f40defac13f38eb26e24f6cd8159e73bfb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:43+00:00",
        "timestamp": "1775152843",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2efe932-4212-499e-8f5c-5a222b2d0191",
        "value": "astralpacketcore1.homes",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:43+00:00",
        "timestamp": "1775152844",
        "to_ids": true,
        "type": "domain",
        "uuid": "b15f69b0-dec8-4a67-a810-5a21dfcb161e",
        "value": "astralpacketcore2.homes",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:44+00:00",
        "timestamp": "1775152844",
        "to_ids": true,
        "type": "domain",
        "uuid": "01bdeff3-3985-40d3-8141-25beb45c9330",
        "value": "bipo.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:44+00:00",
        "timestamp": "1775152844",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fe42e7e-f793-4f75-9d61-710dbcd4dbc8",
        "value": "ceralythavion.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:44+00:00",
        "timestamp": "1775152844",
        "to_ids": true,
        "type": "domain",
        "uuid": "4506ae2b-af06-496e-a42d-73f2516f2d21",
        "value": "ceriamoxel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:44+00:00",
        "timestamp": "1775152844",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cd38c66-cb68-40da-845f-8a58a6fa121f",
        "value": "doravelionexa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:44+00:00",
        "timestamp": "1775152844",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfc980d6-5365-447b-81ff-ec570ebe220b",
        "value": "dorimexaqua.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:44+00:00",
        "timestamp": "1775152845",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a699c11-d17c-40e7-864f-7fccbab9f896",
        "value": "ibnbi.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:45+00:00",
        "timestamp": "1775152845",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba6fae86-d45a-4515-b9cb-b647ac9e6878",
        "value": "index.nebulasyncforge4.baby",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:45+00:00",
        "timestamp": "1775152845",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a60715f-cfb1-470f-80f2-e772b38c9279",
        "value": "macsoft838os.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:45+00:00",
        "timestamp": "1775152845",
        "to_ids": true,
        "type": "domain",
        "uuid": "13658f37-119d-4fd1-8133-10ae994b48f5",
        "value": "masons2.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:45+00:00",
        "timestamp": "1775152845",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e98b866-f121-4b9c-8c27-7085b5f7f88f",
        "value": "metropolishealth.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:45+00:00",
        "timestamp": "1775152845",
        "to_ids": true,
        "type": "domain",
        "uuid": "d71340a9-6750-4baf-903f-d53ee45cfed1",
        "value": "nebulasyncforge4.baby",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:45+00:00",
        "timestamp": "1775152846",
        "to_ids": true,
        "type": "domain",
        "uuid": "3340ad96-2e4c-466c-95ea-d2e51687ae01",
        "value": "noviqareth.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:46+00:00",
        "timestamp": "1775152846",
        "to_ids": true,
        "type": "domain",
        "uuid": "c27ff354-faec-4558-9f90-2d1e890ecdea",
        "value": "oceanbreezecasino.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:46+00:00",
        "timestamp": "1775152846",
        "to_ids": true,
        "type": "domain",
        "uuid": "f39e8577-02cf-4435-ab2e-ad7203620f59",
        "value": "portmotestack.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:46+00:00",
        "timestamp": "1775152846",
        "to_ids": true,
        "type": "domain",
        "uuid": "69c578ac-94b7-4170-a4bd-3f6d0cec0c1e",
        "value": "profitparadox.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:46+00:00",
        "timestamp": "1775152846",
        "to_ids": true,
        "type": "domain",
        "uuid": "041ec243-95c7-42ec-81ee-9463a33d9bb0",
        "value": "publicsale-toby.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:46+00:00",
        "timestamp": "1775152846",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ad936b4-1f8e-4b5b-9a7d-ff8d0ce2eeab",
        "value": "qerunofira.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:46+00:00",
        "timestamp": "1775152847",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a0a697d-6481-4cd9-b8c8-2476ba5315c8",
        "value": "solana-foundation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:47+00:00",
        "timestamp": "1775152847",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfee2a8d-40cb-4a67-9fe6-d6937363b6dc",
        "value": "sorivanelqo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:47+00:00",
        "timestamp": "1775152847",
        "to_ids": true,
        "type": "domain",
        "uuid": "c25fcbd2-3265-4724-9387-a37b0885203f",
        "value": "tendance-perso.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:47+00:00",
        "timestamp": "1775152847",
        "to_ids": true,
        "type": "domain",
        "uuid": "97b34851-8946-456d-91c0-366de9a7615b",
        "value": "ultranodecluster2.homes",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:47+00:00",
        "timestamp": "1775152847",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5516745-c964-446e-9215-e6b9e72d88c6",
        "value": "unlegatecore.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:47+00:00",
        "timestamp": "1775152847",
        "to_ids": true,
        "type": "domain",
        "uuid": "64326597-7679-425d-a81e-ce838c984e02",
        "value": "valenoavion.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:47+00:00",
        "timestamp": "1775152848",
        "to_ids": true,
        "type": "domain",
        "uuid": "16fc8760-ecf0-41cb-bdff-a4ab1c4da3a3",
        "value": "voltfarm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:48+00:00",
        "timestamp": "1775152848",
        "to_ids": true,
        "type": "domain",
        "uuid": "48a8854a-c263-453e-8f17-9fffef202863",
        "value": "xenariquental.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:48+00:00",
        "timestamp": "1775152848",
        "to_ids": true,
        "type": "domain",
        "uuid": "79c5f46f-1dc4-4730-b8c3-2fc73d004bc9",
        "value": "yeloraevion.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:48+00:00",
        "timestamp": "1775152848",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d159a9a-49a9-4390-833c-0d1ba1dc657e",
        "value": "yorendaeravo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:48+00:00",
        "timestamp": "1775152848",
        "to_ids": false,
        "type": "url",
        "uuid": "2a136e20-1a9a-4d89-aa85-3cb21d14c2ab",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1db31cad3bdca33855dd50c9f06e4fe1ca8049fe",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:48+00:00",
        "timestamp": "1775152848",
        "to_ids": true,
        "type": "domain",
        "uuid": "caa86da5-239b-4f00-82fe-901c2a6455f9",
        "value": "mydicksmanager.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:48+00:00",
        "timestamp": "1775152848",
        "to_ids": true,
        "type": "domain",
        "uuid": "59b6a4e9-e10c-44b5-869f-479486f76482",
        "value": "myjbhifi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:49+00:00",
        "timestamp": "1775152849",
        "to_ids": true,
        "type": "domain",
        "uuid": "dccf0b64-3902-4388-8df6-23e81b2461ba",
        "value": "mynbamanager.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:49+00:00",
        "timestamp": "1775152849",
        "to_ids": true,
        "type": "domain",
        "uuid": "76e97f59-0896-401e-8dcf-a65f4b586846",
        "value": "mypetcomanager.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:49+00:00",
        "timestamp": "1775152849",
        "to_ids": true,
        "type": "domain",
        "uuid": "86ff8390-c739-437d-9f26-89d79846f9d1",
        "value": "mypublixmanager.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-02T18:00:49+00:00",
        "timestamp": "1775152849",
        "to_ids": true,
        "type": "domain",
        "uuid": "5acfca80-7497-4f07-87b6-6a47365e14a1",
        "value": "myupennmanager.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}