{
  "Event": {
    "analysis": "1",
    "date": "2026-08-08",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-08-09",
    "publish_timestamp": "1786312803",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1786305615",
    "uuid": "118e66a6-103e-4d16-bf65-5ff0b6ecf532",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T06:00:03+00:00",
        "timestamp": "1786255203",
        "to_ids": false,
        "type": "url",
        "uuid": "932f4a57-ae53-4ef0-b4e4-b3e23977b39e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/fdee6b064d772f11102f0d804a7077fbc1ee8bb2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T06:00:03+00:00",
        "timestamp": "1786255203",
        "to_ids": true,
        "type": "domain",
        "uuid": "d159f154-8286-4026-b996-98eba524f1b9",
        "value": "hulahoopproft.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "santa",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T06:00:04+00:00",
        "timestamp": "1786255204",
        "to_ids": false,
        "type": "url",
        "uuid": "cbf3b964-da96-4226-9138-4c5ae50a68db",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/15f8e63440ea90df3fdc80bd6d2a5d8e5348a63c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "santa",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T06:00:04+00:00",
        "timestamp": "1786255204",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdaa18bb-c684-475d-af2a-be241b475b33",
        "value": "dragonz.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "santa",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T06:00:04+00:00",
        "timestamp": "1786255204",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6d11d82-3eb3-40e7-8d92-166d785074af",
        "value": "rules.dragonz.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:03+00:00",
        "timestamp": "1786280404",
        "to_ids": false,
        "type": "url",
        "uuid": "23ff97ac-4c87-4a8b-ada6-8e65d5cc6c89",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a104202cd8910a10af7ff1ccd4815b7856c42de9",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:04+00:00",
        "timestamp": "1786280404",
        "to_ids": false,
        "type": "url",
        "uuid": "b8507479-ee4a-4da6-92a6-8b1a9985821a",
        "value": "https://x.com/Malwarehunterr/status/2086366984003056118",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:04+00:00",
        "timestamp": "1786280404",
        "to_ids": true,
        "type": "domain",
        "uuid": "42f4ace1-2c27-480c-8f16-5ffbb95b5c87",
        "value": "0fxtys05.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:04+00:00",
        "timestamp": "1786280404",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d84e686-9b27-4a7a-87ee-944eebf01fb1",
        "value": "21hsm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:04+00:00",
        "timestamp": "1786280404",
        "to_ids": true,
        "type": "domain",
        "uuid": "3797ec37-83f0-4841-99a1-f5880fb64c04",
        "value": "4ycan0.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:04+00:00",
        "timestamp": "1786280405",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fe70e70-783c-478d-af10-e583d7b808d0",
        "value": "4ywmd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:05+00:00",
        "timestamp": "1786280405",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce6a788b-9a49-407f-aa79-50e5f91d2bfc",
        "value": "73dw8.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:05+00:00",
        "timestamp": "1786280405",
        "to_ids": true,
        "type": "domain",
        "uuid": "59c0c568-ed46-40f6-b446-ea1bbdbce0d6",
        "value": "7neca.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:05+00:00",
        "timestamp": "1786280405",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c00d5ab-fc75-4a04-bd6f-7ec316aec5e6",
        "value": "81ex001.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:05+00:00",
        "timestamp": "1786280405",
        "to_ids": true,
        "type": "domain",
        "uuid": "64953217-d975-468f-bc36-57c8bb0bf0d5",
        "value": "81ex008.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:05+00:00",
        "timestamp": "1786280406",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce608cb2-a39b-4a56-9cb3-8123cb7acde1",
        "value": "81ex009.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:06+00:00",
        "timestamp": "1786280406",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa0810f1-f3ca-4372-93d1-4ea6695246c2",
        "value": "81ex01.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:06+00:00",
        "timestamp": "1786280406",
        "to_ids": true,
        "type": "domain",
        "uuid": "5514ac7f-fc50-408e-93aa-51a448f20876",
        "value": "8cdyk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:06+00:00",
        "timestamp": "1786280406",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0b8fadf-7b81-4066-95c0-a3dfc60bed90",
        "value": "9pi4p.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:06+00:00",
        "timestamp": "1786280406",
        "to_ids": true,
        "type": "domain",
        "uuid": "29f785f1-1fec-4481-b444-cb562925eb5c",
        "value": "9u74o.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:06+00:00",
        "timestamp": "1786280406",
        "to_ids": true,
        "type": "domain",
        "uuid": "3920b73f-da83-470c-867f-46f3b937cc56",
        "value": "almefn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:06+00:00",
        "timestamp": "1786280406",
        "to_ids": true,
        "type": "domain",
        "uuid": "20d6659c-2b23-4be6-b8ce-81ecc9a9c64a",
        "value": "api.0fxtys05.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:07+00:00",
        "timestamp": "1786280407",
        "to_ids": true,
        "type": "domain",
        "uuid": "c74adceb-6bd3-43af-8c16-2bc3873d8e31",
        "value": "api.21hsm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:07+00:00",
        "timestamp": "1786280407",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc359acf-b6e0-4031-83ac-724c38ab8482",
        "value": "api.4ycan0.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:07+00:00",
        "timestamp": "1786280407",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5240178-cc20-4f8a-8d5a-a4938390df02",
        "value": "api.4ywmd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:07+00:00",
        "timestamp": "1786280407",
        "to_ids": true,
        "type": "domain",
        "uuid": "381bfa86-7b52-4049-a222-963aae04fd5b",
        "value": "api.73dw8.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:07+00:00",
        "timestamp": "1786280407",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3678d13-78a8-4fde-bdc4-403dfcffba8d",
        "value": "api.7neca.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:07+00:00",
        "timestamp": "1786280407",
        "to_ids": true,
        "type": "domain",
        "uuid": "380311ac-9db6-4dd7-ad22-09c9c407239d",
        "value": "api.81ex001.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:07+00:00",
        "timestamp": "1786280408",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f888058-7422-4300-a8d5-4dec489e491e",
        "value": "api.81ex008.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:08+00:00",
        "timestamp": "1786280408",
        "to_ids": true,
        "type": "domain",
        "uuid": "c71acf0d-1b80-402c-9498-d9498a1a054e",
        "value": "api.81ex009.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:08+00:00",
        "timestamp": "1786280408",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae45304e-0f24-47cc-b4c9-c54133505c25",
        "value": "api.81ex01.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:08+00:00",
        "timestamp": "1786280408",
        "to_ids": true,
        "type": "domain",
        "uuid": "29cf633a-5230-49a4-8ae8-fc3ab1884479",
        "value": "api.8cdyk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:08+00:00",
        "timestamp": "1786280408",
        "to_ids": true,
        "type": "domain",
        "uuid": "8926efbb-0cf5-42bc-80a9-0ecffd1b3ec2",
        "value": "api.9pi4p.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:08+00:00",
        "timestamp": "1786280408",
        "to_ids": true,
        "type": "domain",
        "uuid": "591bf384-2034-4ee4-a305-dd0c399f92f3",
        "value": "api.9u74o.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:08+00:00",
        "timestamp": "1786280409",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfbac34c-80c0-4ef5-95c7-1f64427c04bc",
        "value": "api.almefn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:09+00:00",
        "timestamp": "1786280409",
        "to_ids": true,
        "type": "domain",
        "uuid": "89d42ec6-d5f2-49d6-83ae-444b6e89d5ed",
        "value": "api.bagawf45.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:09+00:00",
        "timestamp": "1786280409",
        "to_ids": true,
        "type": "domain",
        "uuid": "36f4d809-273a-4daa-90c1-96b8ee692716",
        "value": "api.bdgan234.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:09+00:00",
        "timestamp": "1786280409",
        "to_ids": true,
        "type": "domain",
        "uuid": "67823284-09a1-4fe9-babe-e5147a0a12f8",
        "value": "api.bkldlgna34.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:09+00:00",
        "timestamp": "1786280409",
        "to_ids": true,
        "type": "domain",
        "uuid": "783ff14e-6c5d-4b91-9101-fe80e4cf8550",
        "value": "api.bmmm4w8r.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:09+00:00",
        "timestamp": "1786280409",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ac61626-ace3-405a-8d47-dbfc459edad8",
        "value": "api.cgje4.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:09+00:00",
        "timestamp": "1786280410",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcfe29ec-59aa-4540-828a-c96d551a58c3",
        "value": "api.cowotc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:10+00:00",
        "timestamp": "1786280410",
        "to_ids": true,
        "type": "domain",
        "uuid": "cea50ab1-c55a-45ba-bfed-ac14f2cec6c4",
        "value": "api.d1z39aui.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:10+00:00",
        "timestamp": "1786280410",
        "to_ids": true,
        "type": "domain",
        "uuid": "59bc4283-e90a-43af-80bd-238479e4f0ce",
        "value": "api.e13falsz.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:10+00:00",
        "timestamp": "1786280410",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4b83dc7-d453-4fc9-aa69-5f970be45874",
        "value": "api.edbrl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:10+00:00",
        "timestamp": "1786280410",
        "to_ids": true,
        "type": "domain",
        "uuid": "2fbb95df-97dd-44bb-981b-388b2e19d3a1",
        "value": "api.fql01.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:10+00:00",
        "timestamp": "1786280410",
        "to_ids": true,
        "type": "domain",
        "uuid": "3015551a-c8ec-4bf9-908d-a0a239f27d13",
        "value": "api.fql02.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:10+00:00",
        "timestamp": "1786280410",
        "to_ids": true,
        "type": "domain",
        "uuid": "86d60a10-b42b-48a5-a21e-39c81b324163",
        "value": "api.fqlexchanger.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:10+00:00",
        "timestamp": "1786280411",
        "to_ids": true,
        "type": "domain",
        "uuid": "867874b7-5dcc-48f4-b27b-94c54bdb00f8",
        "value": "api.gpfql001.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:11+00:00",
        "timestamp": "1786280411",
        "to_ids": true,
        "type": "domain",
        "uuid": "70baed49-ab71-42b0-813b-fdad995c7d96",
        "value": "api.hns6i.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:11+00:00",
        "timestamp": "1786280411",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1dda4e0-bf4d-4fe2-847a-7851c4a9dceb",
        "value": "api.iewrawx342.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:11+00:00",
        "timestamp": "1786280411",
        "to_ids": true,
        "type": "domain",
        "uuid": "58d55f9c-1e1d-4706-a25b-a85e2c042be7",
        "value": "api.jgwaeewg234.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:11+00:00",
        "timestamp": "1786280411",
        "to_ids": true,
        "type": "domain",
        "uuid": "22e19d77-0d50-4349-baad-9368ad3342f5",
        "value": "api.jrscg.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:11+00:00",
        "timestamp": "1786280411",
        "to_ids": true,
        "type": "domain",
        "uuid": "a46a8162-74d9-49d2-8d8b-23c380843cf9",
        "value": "api.k1axxgfa.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:11+00:00",
        "timestamp": "1786280412",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6e1a67d-e675-4688-b053-220d152d5480",
        "value": "api.kcns332.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:12+00:00",
        "timestamp": "1786280412",
        "to_ids": true,
        "type": "domain",
        "uuid": "be0117c9-e5f1-4c95-9e62-85e3429b16c4",
        "value": "api.kle2b.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:12+00:00",
        "timestamp": "1786280412",
        "to_ids": true,
        "type": "domain",
        "uuid": "96faf713-f22c-40a5-b3da-8739dc225871",
        "value": "api.kuzief.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:12+00:00",
        "timestamp": "1786280412",
        "to_ids": true,
        "type": "domain",
        "uuid": "87e5b956-6bd4-44f5-995a-f88174545735",
        "value": "api.ll1jo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:12+00:00",
        "timestamp": "1786280412",
        "to_ids": true,
        "type": "domain",
        "uuid": "a63dd9ac-eeeb-4fe3-a93f-fac7a3c7635f",
        "value": "api.m1e50b.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:12+00:00",
        "timestamp": "1786280412",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6ae7222-6306-4b20-b269-1a01875bda80",
        "value": "api.mhtqp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:12+00:00",
        "timestamp": "1786280413",
        "to_ids": true,
        "type": "domain",
        "uuid": "53797b24-381f-4f6d-aa1c-2efd7ebe3661",
        "value": "api.mnfdaf23.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:13+00:00",
        "timestamp": "1786280413",
        "to_ids": true,
        "type": "domain",
        "uuid": "0973afdf-168f-41c7-bf24-f8f1a172a11b",
        "value": "api.nbfaogaw.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:13+00:00",
        "timestamp": "1786280413",
        "to_ids": true,
        "type": "domain",
        "uuid": "516d1443-be30-4774-8b5c-1bb47b645ab4",
        "value": "api.nbxvvfa324.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:13+00:00",
        "timestamp": "1786280413",
        "to_ids": true,
        "type": "domain",
        "uuid": "425702a5-2e7e-4d0b-9604-6037dce31d6e",
        "value": "api.nbzvzga353.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:13+00:00",
        "timestamp": "1786280413",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1f79dfe-abfb-46d5-8e0a-7c94db18238a",
        "value": "api.nzxcvjoaaf34.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:13+00:00",
        "timestamp": "1786280413",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbf8c864-1bac-4179-a40e-0d43f9cc0ac3",
        "value": "api.oengad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:13+00:00",
        "timestamp": "1786280414",
        "to_ids": true,
        "type": "domain",
        "uuid": "68fc224e-2f11-40ff-bd08-8c7d1027bbcd",
        "value": "api.ofnfadfa.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:14+00:00",
        "timestamp": "1786280414",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6a4be91-a817-4c3e-8fc1-efc3a7011320",
        "value": "api.onbfaga.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:14+00:00",
        "timestamp": "1786280414",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fffc678-ebd9-48a3-91a9-baf40c49a96c",
        "value": "api.payme.win",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T13:00:14+00:00",
        "timestamp": "1786280414",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbec086f-5354-4177-a28f-0929f8ab745c",
        "value": "api.qzwji9o7.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:04+00:00",
        "timestamp": "1786284004",
        "to_ids": false,
        "type": "url",
        "uuid": "149d0ec3-759a-4ed0-a6c0-7b980971d893",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/97f6218f743b9c14a25448f6b0e35618a595bc38",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:04+00:00",
        "timestamp": "1786284004",
        "to_ids": false,
        "type": "url",
        "uuid": "9132a2b9-4422-4408-b0f3-bde9854de386",
        "value": "https://x.com/G60930953/status/2086376673834852703",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:04+00:00",
        "timestamp": "1786284005",
        "to_ids": false,
        "type": "url",
        "uuid": "c3df9940-2fa5-48eb-b8ed-4f235d5905ff",
        "value": "https://www.virustotal.com/gui/file/c3457cca3bdb77750f8bd12be02a993875b763ff00428cf9bfaf89764a2f4e3e/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:05+00:00",
        "timestamp": "1786284005",
        "to_ids": false,
        "type": "url",
        "uuid": "69bb83b2-dc78-44e2-abdc-6a9bb939cfc8",
        "value": "https://www.virustotal.com/gui/file/794a53776783bbe9565219b4c3ba2a99a92b32b08b9bbabe62747c83bd1e10f8/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:05+00:00",
        "timestamp": "1786284005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "7c76de62-8a20-4397-81a5-bab4d31411d4",
        "value": "112.134.208.25",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:05+00:00",
        "timestamp": "1786284005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "2fb67885-b20f-4de6-af5a-f4edb9b197a7",
        "value": "180.18.55.89",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:05+00:00",
        "timestamp": "1786284005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1835e6cd-3924-4597-a62c-693936a2c381",
        "value": "2.57.91.91",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:05+00:00",
        "timestamp": "1786284005",
        "to_ids": true,
        "type": "domain",
        "uuid": "095a0bfd-41e5-4aca-a5b0-7306203f1780",
        "value": "updatesourcetool.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:05+00:00",
        "timestamp": "1786284006",
        "to_ids": false,
        "type": "url",
        "uuid": "fd24e33d-9b76-4ec8-add2-114513048f78",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e1dacfaab4517b70f487add9aacb8eac6fd31f71",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:06+00:00",
        "timestamp": "1786284006",
        "to_ids": true,
        "type": "domain",
        "uuid": "521368ab-4cb6-42eb-a252-5d2589b4483d",
        "value": "mainsec0.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:06+00:00",
        "timestamp": "1786284006",
        "to_ids": false,
        "type": "url",
        "uuid": "6e068383-b168-45e3-bb49-1ac978d6d13d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a04813886a438793e78dff2476d346d6d961ab2e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:06+00:00",
        "timestamp": "1786284006",
        "to_ids": false,
        "type": "url",
        "uuid": "4080f673-addf-4bab-9963-512e54eb2c9c",
        "value": "https://x.com/G60930953/status/2054029601408479514",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:06+00:00",
        "timestamp": "1786284006",
        "to_ids": false,
        "type": "url",
        "uuid": "24bdccb6-394d-4781-8a78-ca031d2bcdc1",
        "value": "https://www.virustotal.com/gui/file/731d96ba17bd5714bba1f4f1dbfa0d1487fe2f54ff20bfdc64d4502538c3d587/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:06+00:00",
        "timestamp": "1786284006",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f9b6979-6407-45f3-a63a-10ac12044608",
        "value": "pozeny.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:06+00:00",
        "timestamp": "1786284007",
        "to_ids": false,
        "type": "url",
        "uuid": "61596758-671a-44ca-8d6c-978a16cd7b12",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3372edb804b714003dbd7d4f2ac53ceb4188e7f6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:07+00:00",
        "timestamp": "1786284007",
        "to_ids": true,
        "type": "domain",
        "uuid": "07b8fe5e-9463-4f7c-b5d0-f6d29f8d7010",
        "value": "game.luckshow.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:07+00:00",
        "timestamp": "1786284007",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b0ecd0b-7300-4b3f-8702-fe890aab8a4f",
        "value": "luckshow.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:07+00:00",
        "timestamp": "1786284007",
        "to_ids": false,
        "type": "url",
        "uuid": "84d35f1f-1021-470e-ad43-2adcc95ded95",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f36a42f9267bec24e78941331f52458e19d3aafd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:07+00:00",
        "timestamp": "1786284007",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0f61ab6-13ec-4998-b356-c4026f72a802",
        "value": "aionedev.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:07+00:00",
        "timestamp": "1786284007",
        "to_ids": true,
        "type": "domain",
        "uuid": "33194212-db64-4167-bc83-5b498d62333b",
        "value": "api.aionedev.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:07+00:00",
        "timestamp": "1786284008",
        "to_ids": true,
        "type": "domain",
        "uuid": "41c67c9e-ad93-4ca5-8c21-c7bc2956e0cb",
        "value": "api.cowpay.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:08+00:00",
        "timestamp": "1786284008",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a8168ac-1c95-4ab4-878c-1d573c1342c2",
        "value": "api.dbrlyk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:08+00:00",
        "timestamp": "1786284008",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6eec613-bbb2-4560-93e8-4f37955e1c71",
        "value": "api.glzno.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:08+00:00",
        "timestamp": "1786284008",
        "to_ids": true,
        "type": "domain",
        "uuid": "52bf65c6-82aa-45c6-87ce-e213330f7b38",
        "value": "api.jczvcfa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:08+00:00",
        "timestamp": "1786284008",
        "to_ids": true,
        "type": "domain",
        "uuid": "db2928e9-13cc-4de8-9d7a-08b3ba2e2e83",
        "value": "api.kshirafin.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:08+00:00",
        "timestamp": "1786284008",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c98d2f9-0f74-4b77-a4ae-5e4d39582fac",
        "value": "cowpay.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:08+00:00",
        "timestamp": "1786284009",
        "to_ids": true,
        "type": "domain",
        "uuid": "f86f7d48-3432-479b-b023-48d5ad94f935",
        "value": "dbrlyk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:09+00:00",
        "timestamp": "1786284009",
        "to_ids": true,
        "type": "domain",
        "uuid": "d71cdcc5-0764-47a3-8757-cd843b7c54c5",
        "value": "glzno.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:09+00:00",
        "timestamp": "1786284009",
        "to_ids": true,
        "type": "domain",
        "uuid": "b70ed94c-74e7-49cb-a05a-66822eba7fcd",
        "value": "jczvcfa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:09+00:00",
        "timestamp": "1786284009",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d5796bb-bb6b-4eea-ac79-97023a4df634",
        "value": "kshirafin.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:19+00:00",
        "timestamp": "1786284019",
        "to_ids": true,
        "type": "domain",
        "uuid": "eef3f710-62d0-46f4-9cb2-cb429706fbf1",
        "value": "api.r8223.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:19+00:00",
        "timestamp": "1786284019",
        "to_ids": true,
        "type": "domain",
        "uuid": "88fd7a74-adde-4c7d-b5b3-c7157bdc7ffc",
        "value": "api.s43l7cv5.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:19+00:00",
        "timestamp": "1786284019",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ec93cab-f1c2-4022-b6ab-6cbabf6078e0",
        "value": "api.t664z7rw.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:19+00:00",
        "timestamp": "1786284020",
        "to_ids": true,
        "type": "domain",
        "uuid": "35c5a286-c25d-40c9-9ea3-1b671650c1a9",
        "value": "api.tqy8n.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:20+00:00",
        "timestamp": "1786284020",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a119a31-b7b0-41f0-a5fa-860ae992cd98",
        "value": "api.weoteash342.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:20+00:00",
        "timestamp": "1786284020",
        "to_ids": true,
        "type": "domain",
        "uuid": "0640344c-bd0f-44e3-ad22-51d18bda9d2b",
        "value": "api.werqogda.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:20+00:00",
        "timestamp": "1786284020",
        "to_ids": true,
        "type": "domain",
        "uuid": "427c324f-d2e6-4d45-80d2-8bbd2f04f367",
        "value": "api.wjf72.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:20+00:00",
        "timestamp": "1786284020",
        "to_ids": true,
        "type": "domain",
        "uuid": "08c78f7c-af95-4ee5-a4f2-2a869591dec3",
        "value": "api.z7i4d58q.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:20+00:00",
        "timestamp": "1786284020",
        "to_ids": true,
        "type": "domain",
        "uuid": "97d6ab6a-aed8-42a2-9746-ccfa3abac3fe",
        "value": "api.zcngdaf32.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:20+00:00",
        "timestamp": "1786284021",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9b04c59-a28b-4abf-8e7a-d2fe81e4006c",
        "value": "api1.gemeney-st.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:21+00:00",
        "timestamp": "1786284021",
        "to_ids": true,
        "type": "domain",
        "uuid": "56831d8b-644e-47ea-bda6-3c640c75df6e",
        "value": "api5.jftxm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:21+00:00",
        "timestamp": "1786284021",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d63e636-c82a-41a2-b1b6-05783f9199bd",
        "value": "bagawf45.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:21+00:00",
        "timestamp": "1786284021",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee44df61-4b72-4745-a799-730d9a46085e",
        "value": "bdgan234.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:21+00:00",
        "timestamp": "1786284021",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef7ffd49-5828-444e-ad88-ee650e9fbf0f",
        "value": "bkldlgna34.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:21+00:00",
        "timestamp": "1786284021",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9cf6724-9d27-4c0e-b170-5edac43e9a20",
        "value": "bmmm4w8r.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:22+00:00",
        "timestamp": "1786284022",
        "to_ids": true,
        "type": "domain",
        "uuid": "edd3d775-1363-4497-859b-d310921cde5f",
        "value": "cdnapi.fqlexchanger.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:22+00:00",
        "timestamp": "1786284022",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe79e3c0-18c2-4d87-8a38-7f63d9ebebc7",
        "value": "cgje4.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:22+00:00",
        "timestamp": "1786284022",
        "to_ids": true,
        "type": "domain",
        "uuid": "efd17946-d792-4f2c-b6c9-2d434358e713",
        "value": "cowotc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:22+00:00",
        "timestamp": "1786284022",
        "to_ids": true,
        "type": "domain",
        "uuid": "461382ef-3a2c-434f-aac3-c5711f39819c",
        "value": "d1z39aui.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:22+00:00",
        "timestamp": "1786284022",
        "to_ids": true,
        "type": "domain",
        "uuid": "38c404cb-0dcd-4e84-ad55-453fcd753f37",
        "value": "dnbadjgkaffa32423.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:22+00:00",
        "timestamp": "1786284022",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1a61c3a-d321-474e-964d-dad151091500",
        "value": "e13falsz.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:23+00:00",
        "timestamp": "1786284023",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e50510b-5061-4418-86bc-c3a5c546b6c2",
        "value": "edbrl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:23+00:00",
        "timestamp": "1786284023",
        "to_ids": true,
        "type": "domain",
        "uuid": "4053b508-603e-49b8-8feb-fe5c19fff433",
        "value": "fql01.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:23+00:00",
        "timestamp": "1786284023",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e63f4df-2bbe-4773-89d2-b93167894d81",
        "value": "fql02.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:23+00:00",
        "timestamp": "1786284023",
        "to_ids": true,
        "type": "domain",
        "uuid": "a74bab50-261d-42a5-adb8-638a1ce1db7d",
        "value": "fqlexchanger.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:23+00:00",
        "timestamp": "1786284023",
        "to_ids": true,
        "type": "domain",
        "uuid": "17c94f23-d129-42ba-87a5-ede55205c83c",
        "value": "gemeney-st.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:23+00:00",
        "timestamp": "1786284023",
        "to_ids": true,
        "type": "domain",
        "uuid": "37b3b5a5-a787-435f-b447-10bc15d80599",
        "value": "gpfql001.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:23+00:00",
        "timestamp": "1786284024",
        "to_ids": true,
        "type": "domain",
        "uuid": "be645b30-b49d-4fa1-9fec-70007b167fc0",
        "value": "h5.4ycan0.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:24+00:00",
        "timestamp": "1786284024",
        "to_ids": true,
        "type": "domain",
        "uuid": "0669c408-12b4-4302-9991-d720243bdea5",
        "value": "h5.d1z39aui.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:24+00:00",
        "timestamp": "1786284024",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d3ae468-cd5a-476d-9304-ce591ff877b6",
        "value": "h5.jgwaeewg234.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:24+00:00",
        "timestamp": "1786284024",
        "to_ids": true,
        "type": "domain",
        "uuid": "083a674a-21f6-4568-bdb7-831afd9dce06",
        "value": "h5.ofnfadfa.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:24+00:00",
        "timestamp": "1786284024",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d0897c7-cfd9-40bb-9f7a-3f1f07a54bfb",
        "value": "h5.ogdcvh53.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:24+00:00",
        "timestamp": "1786284024",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd767a15-0c9a-414e-9cdd-da342720f936",
        "value": "h5.oweraafd24.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:24+00:00",
        "timestamp": "1786284025",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5615dd3-8f3c-4c22-9e30-003967134beb",
        "value": "h5.zcngdaf32.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:25+00:00",
        "timestamp": "1786284025",
        "to_ids": true,
        "type": "domain",
        "uuid": "71b05bda-21df-4dff-af4d-b6b2cac8d0e4",
        "value": "hns6i.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:25+00:00",
        "timestamp": "1786284025",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bb1c707-39ee-4c99-b9ec-79b20128fa48",
        "value": "icicbankpay.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:25+00:00",
        "timestamp": "1786284025",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ae313e2-9cdf-4277-bfbb-1f8678fe1110",
        "value": "iewrawx342.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:25+00:00",
        "timestamp": "1786284025",
        "to_ids": true,
        "type": "domain",
        "uuid": "c961cb1d-620e-46d7-afd9-db896ba40961",
        "value": "iginvest.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:25+00:00",
        "timestamp": "1786284025",
        "to_ids": true,
        "type": "domain",
        "uuid": "daa62609-073c-46ec-b4a1-8d700f9a5d8d",
        "value": "iginvesting.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:25+00:00",
        "timestamp": "1786284026",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c0bbf89-0c6f-4f3f-a5ff-2fea7f0e4c39",
        "value": "iginvestor.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:26+00:00",
        "timestamp": "1786284026",
        "to_ids": true,
        "type": "domain",
        "uuid": "e84f324d-b2ff-40ab-98bf-9e85e0362c4b",
        "value": "jftxm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:26+00:00",
        "timestamp": "1786284026",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a160b90-f6b0-4cad-85ad-a7232898c064",
        "value": "jgwaeewg234.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:26+00:00",
        "timestamp": "1786284026",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebdcab73-8433-43ad-9cde-258d77ba1b80",
        "value": "jrscg.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:26+00:00",
        "timestamp": "1786284026",
        "to_ids": true,
        "type": "domain",
        "uuid": "04dbc350-0a15-49cd-9a46-aa37937c0fcb",
        "value": "k1axxgfa.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:26+00:00",
        "timestamp": "1786284026",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ec9a03e-26d2-4171-b858-0bd223d69a41",
        "value": "kcns332.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:26+00:00",
        "timestamp": "1786284027",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5c93f71-d94c-40c4-8255-cab1ef2cfbe3",
        "value": "kgenaodjf3532.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:27+00:00",
        "timestamp": "1786284027",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dd11752-a830-4df3-8137-b0a9b305282c",
        "value": "kle2b.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:27+00:00",
        "timestamp": "1786284027",
        "to_ids": true,
        "type": "domain",
        "uuid": "92d2b674-f9da-4daf-a0f6-7438700b0b66",
        "value": "kuzief.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:27+00:00",
        "timestamp": "1786284027",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f7790bc-787c-44dd-afbf-55b21a523a31",
        "value": "ll1jo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:27+00:00",
        "timestamp": "1786284027",
        "to_ids": true,
        "type": "domain",
        "uuid": "e40f7509-a224-4ed9-a793-46c9462f0269",
        "value": "m1e50b.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:27+00:00",
        "timestamp": "1786284027",
        "to_ids": true,
        "type": "domain",
        "uuid": "72a1f8c4-befb-4d85-9c53-a4a28a8c6df7",
        "value": "mhtqp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:27+00:00",
        "timestamp": "1786284028",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9c10689-894f-477c-8418-c9afe6d94ddc",
        "value": "mnfdaf23.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:28+00:00",
        "timestamp": "1786284028",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f773083-1ff4-4b72-b752-817f4ff2b404",
        "value": "nbfaogaw.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:28+00:00",
        "timestamp": "1786284028",
        "to_ids": true,
        "type": "domain",
        "uuid": "66a7582a-51fd-41b8-9627-faeda8112229",
        "value": "nbvxzcv23.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:28+00:00",
        "timestamp": "1786284028",
        "to_ids": true,
        "type": "domain",
        "uuid": "607db899-76ec-4bee-8240-42d141425c91",
        "value": "nbxvvfa324.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:28+00:00",
        "timestamp": "1786284028",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d3ce079-4090-41bb-87d9-e2644c1b156b",
        "value": "nbzvzga353.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:28+00:00",
        "timestamp": "1786284028",
        "to_ids": true,
        "type": "domain",
        "uuid": "79295391-e059-46be-b70b-c8cd6b214517",
        "value": "ngkasdjfa.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:28+00:00",
        "timestamp": "1786284029",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e40ef90-f77f-455a-a275-d45e68afa636",
        "value": "nzxcvjoaaf34.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:29+00:00",
        "timestamp": "1786284029",
        "to_ids": true,
        "type": "domain",
        "uuid": "f55bb922-fac2-4d12-976e-4f559b14cbd0",
        "value": "oengad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:29+00:00",
        "timestamp": "1786284029",
        "to_ids": true,
        "type": "domain",
        "uuid": "da2b1176-6333-4e2e-b219-0a4b6f1f4106",
        "value": "ofnfadfa.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:29+00:00",
        "timestamp": "1786284029",
        "to_ids": true,
        "type": "domain",
        "uuid": "24f52254-e1a7-4462-ad7a-58a0e01c3257",
        "value": "ogdcvh53.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:29+00:00",
        "timestamp": "1786284029",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc7fb4fa-a58b-46dd-8733-6b710acc036a",
        "value": "onbfaga.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:29+00:00",
        "timestamp": "1786284029",
        "to_ids": true,
        "type": "domain",
        "uuid": "41e102e8-4e80-4012-bfcd-b9ac61cb0d1c",
        "value": "oweraafd24.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:29+00:00",
        "timestamp": "1786284030",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b1844d1-f62c-4e82-8fff-29c6595d4017",
        "value": "payme.win",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:30+00:00",
        "timestamp": "1786284030",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f68880f-ece3-4394-bf05-9665bc01bfa4",
        "value": "pmgjob.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:30+00:00",
        "timestamp": "1786284030",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa46750e-c1f0-4b73-b46c-b92b51a656f8",
        "value": "qzwji9o7.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:30+00:00",
        "timestamp": "1786284030",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a7c5938-9624-4e4e-b6b1-6afdc1cda4af",
        "value": "r8223.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:30+00:00",
        "timestamp": "1786284030",
        "to_ids": true,
        "type": "domain",
        "uuid": "15366adf-e665-453f-8c88-7e4dcb6f5310",
        "value": "s43l7cv5.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:30+00:00",
        "timestamp": "1786284030",
        "to_ids": true,
        "type": "domain",
        "uuid": "281f75ea-238f-43eb-95a8-3747b4f8ae5e",
        "value": "t664z7rw.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:30+00:00",
        "timestamp": "1786284031",
        "to_ids": true,
        "type": "domain",
        "uuid": "02e3f455-fc7d-4d2b-b54c-e30d8f17c9e6",
        "value": "tqy8n.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:31+00:00",
        "timestamp": "1786284031",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e09a614-a0c4-40d0-a1bb-c6d3a1d943b2",
        "value": "vctn.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:31+00:00",
        "timestamp": "1786284031",
        "to_ids": true,
        "type": "domain",
        "uuid": "e439d0e2-3483-42ac-b39f-bcfd09fb67ad",
        "value": "weoteash342.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:31+00:00",
        "timestamp": "1786284031",
        "to_ids": true,
        "type": "domain",
        "uuid": "54cd8b7e-bcbf-46cf-9ccc-efcea3a7dbf2",
        "value": "werqogda.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:31+00:00",
        "timestamp": "1786284031",
        "to_ids": true,
        "type": "domain",
        "uuid": "292f0a45-c6d5-4624-9d36-ab777203f0fd",
        "value": "wjf72.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:31+00:00",
        "timestamp": "1786284031",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a763aba-4f5f-4da0-9ef5-d60300e19722",
        "value": "ws.qzwji9o7.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:31+00:00",
        "timestamp": "1786284032",
        "to_ids": true,
        "type": "domain",
        "uuid": "596b46fc-9afc-4d13-b448-30de4cd6512e",
        "value": "z7i4d58q.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_bankbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:32+00:00",
        "timestamp": "1786284032",
        "to_ids": true,
        "type": "domain",
        "uuid": "83cb19d9-0cad-43da-b76b-8e7f5ec0179e",
        "value": "zcngdaf32.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:32+00:00",
        "timestamp": "1786284032",
        "to_ids": false,
        "type": "url",
        "uuid": "ab8207a2-1b76-48ea-965a-14d94739aab6",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/46b0e1e97f3951adfa59e4c07a3de654b35942e7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:32+00:00",
        "timestamp": "1786284032",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb1db49b-7392-4d02-b22c-ef9267283833",
        "value": "animeverse.win",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:32+00:00",
        "timestamp": "1786284032",
        "to_ids": true,
        "type": "domain",
        "uuid": "1010163b-00dc-4edd-9dab-78b9e0b03000",
        "value": "gitzfile.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:32+00:00",
        "timestamp": "1786284032",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5c39661-50e3-4e87-808d-1ea9a04175ee",
        "value": "islandradio.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:32+00:00",
        "timestamp": "1786284033",
        "to_ids": true,
        "type": "domain",
        "uuid": "b90a60e6-3078-4ee0-9ed4-29ca45b82ebd",
        "value": "jayaputra.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:33+00:00",
        "timestamp": "1786284033",
        "to_ids": true,
        "type": "domain",
        "uuid": "081cb6c6-00a0-445e-b5fa-ddad0ce72fe3",
        "value": "livecastserver.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:33+00:00",
        "timestamp": "1786284033",
        "to_ids": true,
        "type": "domain",
        "uuid": "0177df03-a6d4-467f-bdfc-c3916d71ee0d",
        "value": "yunru.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:33+00:00",
        "timestamp": "1786284033",
        "to_ids": false,
        "type": "url",
        "uuid": "88f15f5b-c4b3-4edc-9b8f-17da92f1e756",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6ae99372d52c2a79ac20252193d762534fb17813",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:33+00:00",
        "timestamp": "1786284033",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae527be7-6e49-4d0f-949f-da5f18832fd2",
        "value": "aetherfireport.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:33+00:00",
        "timestamp": "1786284033",
        "to_ids": true,
        "type": "domain",
        "uuid": "1786fce7-07c8-4650-b31e-768f36ab3cae",
        "value": "aetherthornfrontier.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:33+00:00",
        "timestamp": "1786284034",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d1ae549-5241-40bb-b99a-d729710c1c2a",
        "value": "argentfernfrontier.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:34+00:00",
        "timestamp": "1786284034",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe111d09-0b18-4e08-99e9-9c3109b87c9e",
        "value": "argentrainglen.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:34+00:00",
        "timestamp": "1786284034",
        "to_ids": true,
        "type": "domain",
        "uuid": "d07b13d6-1235-4002-af8b-0295f1701edf",
        "value": "astralnorthtrail.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:34+00:00",
        "timestamp": "1786284034",
        "to_ids": true,
        "type": "domain",
        "uuid": "2046161b-b6dd-4620-9e15-9482987a363b",
        "value": "auroracindercore.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:34+00:00",
        "timestamp": "1786284034",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef832078-7d59-4228-802b-a9f1c791cb63",
        "value": "cinderthorncliff.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:34+00:00",
        "timestamp": "1786284034",
        "to_ids": true,
        "type": "domain",
        "uuid": "81dbc29a-a80b-4147-8a0d-1fcc19f970ca",
        "value": "cobaltoakpeak.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:34+00:00",
        "timestamp": "1786284035",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1a80ab2-1c4e-45b7-a346-a3c18cd27596",
        "value": "driftcragnexus.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:35+00:00",
        "timestamp": "1786284035",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e868c4b-43f7-44de-acfd-f1558ba85b4e",
        "value": "embereverhall.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:35+00:00",
        "timestamp": "1786284035",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2f78b3a-f5e1-44f2-a0b7-4ec631131839",
        "value": "embereverstead.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:35+00:00",
        "timestamp": "1786284035",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b76c526-4cff-493b-9f36-32f09c548b03",
        "value": "frostrunerise.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:35+00:00",
        "timestamp": "1786284035",
        "to_ids": true,
        "type": "domain",
        "uuid": "db16e038-c05b-4ab3-83b0-7f029f02bf90",
        "value": "frostvalepoint.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:35+00:00",
        "timestamp": "1786284035",
        "to_ids": true,
        "type": "domain",
        "uuid": "ede0a391-c0f8-467d-abf2-a60088e5fdd3",
        "value": "garnetoakpath.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:35+00:00",
        "timestamp": "1786284036",
        "to_ids": true,
        "type": "domain",
        "uuid": "61d0d055-5057-47d0-9cd3-09f42b453f73",
        "value": "garnetpinereach.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:36+00:00",
        "timestamp": "1786284036",
        "to_ids": true,
        "type": "domain",
        "uuid": "b56c1f49-3198-428e-abad-b30ba165c48c",
        "value": "halcyonashencitadel.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:36+00:00",
        "timestamp": "1786284036",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1dae7e4-44bc-4503-bc21-04cfc4d88b73",
        "value": "halcyonfencrest.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:36+00:00",
        "timestamp": "1786284036",
        "to_ids": true,
        "type": "domain",
        "uuid": "81d24a89-b98a-4df0-8c61-93d5fb4d34f4",
        "value": "halcyonwindmark.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:36+00:00",
        "timestamp": "1786284036",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b29574a-c26f-48b4-9032-b6a2ddcad6af",
        "value": "hyperhollowpeak.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:36+00:00",
        "timestamp": "1786284036",
        "to_ids": true,
        "type": "domain",
        "uuid": "565e072b-0219-44f8-a08b-0792d1bd9c6a",
        "value": "hypernorthnexus.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:36+00:00",
        "timestamp": "1786284037",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4dea93b-0147-46e7-b76f-72527e837ec6",
        "value": "indigomoonglen.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:37+00:00",
        "timestamp": "1786284037",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fd4aa03-212a-4928-98e8-2d2626bae1aa",
        "value": "ivoryflintview.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:37+00:00",
        "timestamp": "1786284037",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c505c93-a937-413f-8040-ac09b5f88ac1",
        "value": "ivoryhollowwell.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:37+00:00",
        "timestamp": "1786284037",
        "to_ids": true,
        "type": "domain",
        "uuid": "6355f410-4b1f-4865-911e-f076243e19cf",
        "value": "karmicruneport.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:37+00:00",
        "timestamp": "1786284037",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d325b2a-d127-4d14-bfb4-03fbc7eaa9f9",
        "value": "karmicshadowpath.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:37+00:00",
        "timestamp": "1786284037",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7b0dc8b-4e87-447f-8f11-1c1db3d00363",
        "value": "karmicstormtrail.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:37+00:00",
        "timestamp": "1786284038",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a99094f-6657-495b-829c-ed7e15deda23",
        "value": "marblestormrise.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:38+00:00",
        "timestamp": "1786284038",
        "to_ids": true,
        "type": "domain",
        "uuid": "5584da15-5176-4f99-9c0a-9f6e18f2868f",
        "value": "meridianbirchcrown.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:38+00:00",
        "timestamp": "1786284038",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cb10f14-950e-4794-8976-2a9b52cd3684",
        "value": "meridianstormcrown.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:38+00:00",
        "timestamp": "1786284038",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0083500-34cd-440f-bf9f-651c8288e7e6",
        "value": "obsidianveilroot.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:38+00:00",
        "timestamp": "1786284038",
        "to_ids": true,
        "type": "domain",
        "uuid": "f756d80a-d446-44db-b57e-027f93df9022",
        "value": "onyxfernfall.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:38+00:00",
        "timestamp": "1786284038",
        "to_ids": true,
        "type": "domain",
        "uuid": "93940960-fab8-4447-bba4-44ca250876f0",
        "value": "pumpsolstream.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:38+00:00",
        "timestamp": "1786284039",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a8100d3-6930-4651-aa49-3a96ba3b13b5",
        "value": "pumpsolstreamer.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:39+00:00",
        "timestamp": "1786284039",
        "to_ids": true,
        "type": "domain",
        "uuid": "1eae0035-32e9-48e3-8403-c92e87a2acae",
        "value": "quant-service-ai.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:39+00:00",
        "timestamp": "1786284039",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3bc9dbf-d205-451a-8949-9cb5d42c0c17",
        "value": "roshadetools.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:39+00:00",
        "timestamp": "1786284039",
        "to_ids": true,
        "type": "domain",
        "uuid": "11461acb-3aa1-4628-bad8-dca24d509887",
        "value": "sablepinerun.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:39+00:00",
        "timestamp": "1786284039",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff3ef2e0-5142-4453-bd8d-fee9e98d967b",
        "value": "verdantfernfall.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:39+00:00",
        "timestamp": "1786284039",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f491909-6c8f-4172-94b7-c94fc9688e9c",
        "value": "verdantsilverpeak.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:39+00:00",
        "timestamp": "1786284040",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec12ae8c-ed63-4109-9416-e0a317e9086e",
        "value": "willowrivershore.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:40+00:00",
        "timestamp": "1786284040",
        "to_ids": false,
        "type": "url",
        "uuid": "d4983221-8933-4ea7-8ede-2e19fcfe4394",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2b320e9ec6d8104f8951210368ece18a86e75ed3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:40+00:00",
        "timestamp": "1786284040",
        "to_ids": false,
        "type": "url",
        "uuid": "a34ffc8e-5818-4940-b841-ae42078ad046",
        "value": "https://x.com/OpcodeIntel/status/2085709457523417430",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:40+00:00",
        "timestamp": "1786284040",
        "to_ids": false,
        "type": "url",
        "uuid": "d061ea50-65c0-45d6-a101-53014e45aeee",
        "value": "https://x.com/0xhido/status/2086081899059888142",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:40+00:00",
        "timestamp": "1786284040",
        "to_ids": false,
        "type": "url",
        "uuid": "4e465d3a-6438-462b-b45e-681bc437fde9",
        "value": "https://www.virustotal.com/gui/file/1d8be15c053ec557976f28f5db6f001ac901b46534897d8ece9a21c737484eb8/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:40+00:00",
        "timestamp": "1786284040",
        "to_ids": false,
        "type": "url",
        "uuid": "c3f70038-2dbb-40a6-b9f3-3d49f9467b8c",
        "value": "https://www.virustotal.com/gui/file/3dc5db3296a0e5a7244b2b7453ed2efe114bb650500d58d6e31d3d6a49cbfafa/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:40+00:00",
        "timestamp": "1786284041",
        "to_ids": false,
        "type": "url",
        "uuid": "0cb1de79-1021-4c37-b463-6665a39f0b4a",
        "value": "https://www.virustotal.com/gui/file/b73c8d95079a9cc6fb9712f06798c69a64362339d4ee5ec08bc0339e3ab4fbe8/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:41+00:00",
        "timestamp": "1786284041",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b0fabbf-cf7f-4104-be1f-a86fc13b7120",
        "value": "clientproject.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T14:00:41+00:00",
        "timestamp": "1786284041",
        "to_ids": true,
        "type": "domain",
        "uuid": "959b6798-8baf-47f6-b2b9-2afe66de6f66",
        "value": "telecombdtap.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:05+00:00",
        "timestamp": "1786291205",
        "to_ids": false,
        "type": "url",
        "uuid": "5f2bc543-00dd-411e-912a-f238f6a13196",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/638e35f12e8b7736a4526093381e0af60d266a81",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:05+00:00",
        "timestamp": "1786291205",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c9f8306-a5cf-481e-b181-3f131ca6fe35",
        "value": "fewmwefmkweflk.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:05+00:00",
        "timestamp": "1786291205",
        "to_ids": false,
        "type": "url",
        "uuid": "597a6355-3e34-42dd-98ab-82e3f6564a8b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2fdda0762e43b17a30cc6e7a217124cf95a4effb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:05+00:00",
        "timestamp": "1786291205",
        "to_ids": true,
        "type": "domain",
        "uuid": "78bae365-0f85-4843-9436-e7f822bd0c3d",
        "value": "api.emojistudio.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:06+00:00",
        "timestamp": "1786291206",
        "to_ids": true,
        "type": "domain",
        "uuid": "e620c915-32d4-4f81-a5ef-875bcc6745c5",
        "value": "bakpon.it.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:06+00:00",
        "timestamp": "1786291206",
        "to_ids": true,
        "type": "domain",
        "uuid": "1df16b70-e4d2-4ab1-b933-5b00dd1fed81",
        "value": "cdn.risewi.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:06+00:00",
        "timestamp": "1786291206",
        "to_ids": true,
        "type": "domain",
        "uuid": "f178c9f1-b8b5-4f0d-afe8-2339b7598d58",
        "value": "cdn.toenoe.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:06+00:00",
        "timestamp": "1786291206",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f3a1825-f9ae-419a-a68d-73bb86c889dd",
        "value": "revologa.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:06+00:00",
        "timestamp": "1786291206",
        "to_ids": true,
        "type": "domain",
        "uuid": "063cf9dd-ecf2-4022-8f8a-df0ee5388d6a",
        "value": "storbit.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:06+00:00",
        "timestamp": "1786291206",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f6de463-0634-466f-9008-420d666344b4",
        "value": "vejkvnfkjvdfkjvdfvejkvnfkjvdfkjvdf.buzz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:06+00:00",
        "timestamp": "1786291207",
        "to_ids": false,
        "type": "url",
        "uuid": "48b7cffc-856c-4564-bb6d-aa5c74322c18",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/026e453300528a7367f67c5e3a16d772beacec82",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:07+00:00",
        "timestamp": "1786291207",
        "to_ids": false,
        "type": "url",
        "uuid": "8a4ef6ee-95f9-4ba4-9902-798307c32292",
        "value": "https://www.virustotal.com/gui/ip-address/181.215.18.89/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:07+00:00",
        "timestamp": "1786291207",
        "to_ids": true,
        "type": "domain",
        "uuid": "63ced384-0cf2-4a6c-a0a6-2366a67862d3",
        "value": "downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:07+00:00",
        "timestamp": "1786291207",
        "to_ids": true,
        "type": "domain",
        "uuid": "4338e724-f941-4590-9b4f-3157ba5cbb75",
        "value": "maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:07+00:00",
        "timestamp": "1786291207",
        "to_ids": true,
        "type": "domain",
        "uuid": "064bbe51-a9de-4278-9c11-db824f1554c8",
        "value": "3g.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:07+00:00",
        "timestamp": "1786291207",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5199433-2ee4-4a9d-8dff-46aa7e6159da",
        "value": "account.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:07+00:00",
        "timestamp": "1786291208",
        "to_ids": true,
        "type": "domain",
        "uuid": "f68688cc-e758-45ae-a4e8-5db756f18389",
        "value": "ads.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:08+00:00",
        "timestamp": "1786291208",
        "to_ids": true,
        "type": "domain",
        "uuid": "f07a0a65-17c2-4166-8bfa-c611d76bf7fd",
        "value": "alitcnsecurecloud.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:08+00:00",
        "timestamp": "1786291208",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9c19768-83b1-4f3c-9ca1-be94f91ab415",
        "value": "api.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:08+00:00",
        "timestamp": "1786291208",
        "to_ids": true,
        "type": "domain",
        "uuid": "669f32e3-20d5-4684-b040-fa63ff897a74",
        "value": "apply.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:08+00:00",
        "timestamp": "1786291208",
        "to_ids": true,
        "type": "domain",
        "uuid": "d305811f-932d-44ab-82b8-146aaf49df50",
        "value": "csp.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:08+00:00",
        "timestamp": "1786291208",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3ebf761-c309-400e-bc91-debb31a5fa7e",
        "value": "events.api.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:09+00:00",
        "timestamp": "1786291209",
        "to_ids": true,
        "type": "domain",
        "uuid": "7bcfd0f8-f278-4f46-8860-ba72f7f7f94b",
        "value": "fc.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:09+00:00",
        "timestamp": "1786291209",
        "to_ids": true,
        "type": "domain",
        "uuid": "50350c8f-2153-452f-8787-f2505da18750",
        "value": "guce.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:09+00:00",
        "timestamp": "1786291209",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfa3cdd8-378b-49db-a9aa-c2effc599a1a",
        "value": "lo.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:09+00:00",
        "timestamp": "1786291209",
        "to_ids": true,
        "type": "domain",
        "uuid": "9eb75a0e-e77a-422c-ad92-257ee4240e8a",
        "value": "login.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:09+00:00",
        "timestamp": "1786291209",
        "to_ids": true,
        "type": "domain",
        "uuid": "dec3c7ac-c8d1-498d-8412-059504aff589",
        "value": "logincdn.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:09+00:00",
        "timestamp": "1786291209",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9abea39-619f-4d72-9fa6-048a9266adb5",
        "value": "loginsuccess.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:09+00:00",
        "timestamp": "1786291210",
        "to_ids": true,
        "type": "domain",
        "uuid": "2fe79a7b-fec2-4b8a-ae16-36375c4039ae",
        "value": "loq.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:10+00:00",
        "timestamp": "1786291210",
        "to_ids": true,
        "type": "domain",
        "uuid": "0626b0aa-cd3b-45e7-9b3c-e38ca5573925",
        "value": "mail-nudt.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:10+00:00",
        "timestamp": "1786291210",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fbbebf2-eb0c-457c-b747-135816d3a783",
        "value": "mail.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:10+00:00",
        "timestamp": "1786291210",
        "to_ids": true,
        "type": "domain",
        "uuid": "360e40f2-81bf-46d2-953a-0c5e312d1f64",
        "value": "mail.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:10+00:00",
        "timestamp": "1786291210",
        "to_ids": true,
        "type": "domain",
        "uuid": "019f6ab6-ce0d-40f4-9426-98e2087464e4",
        "value": "ns3.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:10+00:00",
        "timestamp": "1786291211",
        "to_ids": true,
        "type": "domain",
        "uuid": "be903137-0099-48f3-8087-defd9770d49c",
        "value": "ob.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:11+00:00",
        "timestamp": "1786291211",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cf0b503-5d57-458e-94ad-9b92c2d192b8",
        "value": "server.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:11+00:00",
        "timestamp": "1786291211",
        "to_ids": true,
        "type": "domain",
        "uuid": "778865c5-e7b4-4491-9681-a5223b36ec1b",
        "value": "so.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:11+00:00",
        "timestamp": "1786291211",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ede2052-d73d-469f-9c78-d553a37f71e3",
        "value": "static.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:11+00:00",
        "timestamp": "1786291211",
        "to_ids": true,
        "type": "domain",
        "uuid": "66fed503-a2e2-420d-9d9a-b3b2889c39de",
        "value": "u1.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:11+00:00",
        "timestamp": "1786291211",
        "to_ids": true,
        "type": "domain",
        "uuid": "812a1b54-1fa9-4399-bd1d-3bc9e3f7d411",
        "value": "u1.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:11+00:00",
        "timestamp": "1786291211",
        "to_ids": true,
        "type": "domain",
        "uuid": "53f11a44-a708-463b-8528-039d7c90c825",
        "value": "u2.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:12+00:00",
        "timestamp": "1786291212",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b370365-3e9f-4eda-b948-94b222f0ca98",
        "value": "u2.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:12+00:00",
        "timestamp": "1786291212",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff30c3a4-064c-450f-aa96-10b7c581a0ee",
        "value": "u3.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:12+00:00",
        "timestamp": "1786291212",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbfb2ebe-1f64-41d4-ae5e-71ce86b9a19d",
        "value": "u3.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:12+00:00",
        "timestamp": "1786291212",
        "to_ids": true,
        "type": "domain",
        "uuid": "e90ddcdc-e155-48a6-983b-3704ff3c3f50",
        "value": "u4.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:12+00:00",
        "timestamp": "1786291212",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d1c3aef-cf94-465b-8cd0-ccfdfbcd23c3",
        "value": "u4.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:12+00:00",
        "timestamp": "1786291212",
        "to_ids": true,
        "type": "domain",
        "uuid": "394b3e2e-368e-41f4-9604-e0deb5734ce1",
        "value": "u5.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:13+00:00",
        "timestamp": "1786291213",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9fbd734-86e4-45b0-abe8-92fce297e6bc",
        "value": "u5.maildownloadfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:13+00:00",
        "timestamp": "1786291213",
        "to_ids": true,
        "type": "domain",
        "uuid": "0acfcd8b-8cb3-4131-9c04-3154b36f6225",
        "value": "udc.downloadmailfiles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:13+00:00",
        "timestamp": "1786291213",
        "to_ids": false,
        "type": "url",
        "uuid": "91b682c7-2765-41ab-a8b5-74ee1a3bc020",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5525c1d9f2d8051a8221b44d5ccfcd8ba809d232",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:13+00:00",
        "timestamp": "1786291213",
        "to_ids": false,
        "type": "url",
        "uuid": "9e93fb48-973d-4c44-a021-e8a852ecc6c3",
        "value": "https://x.com/volrant136/status/2086469312362291330",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:13+00:00",
        "timestamp": "1786291213",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "91cd115f-c220-46c7-bc9a-7b619da6fe65",
        "value": "38.60.235.109",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:13+00:00",
        "timestamp": "1786291214",
        "to_ids": true,
        "type": "domain",
        "uuid": "34c34160-b860-4e18-9cf0-11567d90649d",
        "value": "joinnepalsecuregroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:14+00:00",
        "timestamp": "1786291214",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b2b0c5e-d714-400e-8033-49da8759741c",
        "value": "y9.joinnepalsecuregroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:14+00:00",
        "timestamp": "1786291214",
        "to_ids": false,
        "type": "url",
        "uuid": "4c196fc7-5432-4a9f-abc8-ec3e6b38a3ee",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a3ec6a00ef248ec8c2be00c50d00002ca25b46e9",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:14+00:00",
        "timestamp": "1786291214",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "bf294e4b-cde8-4071-8504-14369f39f174",
        "value": "185.163.204.144",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:14+00:00",
        "timestamp": "1786291214",
        "to_ids": true,
        "type": "domain",
        "uuid": "421937a4-a63a-4f46-b9fa-893303f59135",
        "value": "thelastday.rip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:14+00:00",
        "timestamp": "1786291214",
        "to_ids": true,
        "type": "domain",
        "uuid": "64615499-bba6-4377-9785-4af73cc0702a",
        "value": "panel.thelastday.rip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "bad_service",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:14+00:00",
        "timestamp": "1786291215",
        "to_ids": false,
        "type": "url",
        "uuid": "653792b3-9832-4192-957d-a50e9eaf7d16",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c70cfe236425bf23a8a8de45cc5e85ce3f8327b6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bad_service",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:15+00:00",
        "timestamp": "1786291215",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "3aac197b-37c1-46a1-a84c-c82851e06815",
        "value": "185.163.204.246",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:15+00:00",
        "timestamp": "1786291215",
        "to_ids": false,
        "type": "url",
        "uuid": "c7eec9a4-afc8-48c6-89ca-1bf744f5314d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/53ab552ebac4981bb9073f8c0bdf1acbd839516b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:15+00:00",
        "timestamp": "1786291215",
        "to_ids": false,
        "type": "url",
        "uuid": "164d04a1-4639-4c65-b9ea-7ee74dad57c7",
        "value": "https://x.com/Fact_Finder03/status/2086385245012558150",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:15+00:00",
        "timestamp": "1786291215",
        "to_ids": false,
        "type": "url",
        "uuid": "4152c723-f208-4e8c-8bc0-e3f46cf8f90e",
        "value": "https://www.virustotal.com/gui/file/212acf6988a147dc48a67ac51cbd267121791f8f79ae733698c614ab56511fa6/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:15+00:00",
        "timestamp": "1786291216",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1c70d4b3-8f2d-4c6d-893d-3541f0d80928",
        "value": "104.193.195.159",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:16+00:00",
        "timestamp": "1786291216",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "38a9eef8-4caa-46e8-afff-e5a6a4330a38",
        "value": "139.99.27.37",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:16+00:00",
        "timestamp": "1786291216",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4f42f102-d0f7-4dcc-b444-69eafc541559",
        "value": "144.172.98.82",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:16+00:00",
        "timestamp": "1786291217",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "cb36af90-1e2f-4ab7-9292-1d38ae87e885",
        "value": "45.134.13.253",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:17+00:00",
        "timestamp": "1786291217",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "5157d420-3726-45e2-904d-b8e628a93b37",
        "value": "95.85.238.172",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:17+00:00",
        "timestamp": "1786291217",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f5039c0-580e-4125-b865-6ec7cb312e09",
        "value": "coinmate.signin.blog",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:17+00:00",
        "timestamp": "1786291217",
        "to_ids": true,
        "type": "domain",
        "uuid": "709b1493-5076-42d7-85a6-d0f15e186e23",
        "value": "id0972146.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T16:00:17+00:00",
        "timestamp": "1786291217",
        "to_ids": false,
        "type": "url",
        "uuid": "67facd18-fc46-41d6-ab92-b28a161d27d7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/03e740404791f574ee6655cea04514f9863859eb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:03+00:00",
        "timestamp": "1786294803",
        "to_ids": false,
        "type": "url",
        "uuid": "420bfeb8-61fa-41f2-a94f-f67eb6d1348e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6417139f5d6b249dc7eeba6372a511742016823d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:03+00:00",
        "timestamp": "1786294803",
        "to_ids": true,
        "type": "domain",
        "uuid": "226b66a0-75bd-4df5-8539-9d6a01b64508",
        "value": "accsep.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:03+00:00",
        "timestamp": "1786294803",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c6efd46-b055-49c2-8d55-6ba25370e96b",
        "value": "arpntsre.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:03+00:00",
        "timestamp": "1786294804",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ec5ecce-48fa-4976-ab07-7a61c96508e8",
        "value": "auth-accounts.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:04+00:00",
        "timestamp": "1786294804",
        "to_ids": true,
        "type": "domain",
        "uuid": "729773cc-edb6-4e53-a775-31c3de813c28",
        "value": "eipser.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:04+00:00",
        "timestamp": "1786294804",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb7c4b24-8e24-446a-ac3e-14e5ea9be2c9",
        "value": "eipser.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:04+00:00",
        "timestamp": "1786294805",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6d3a379-b500-491f-9a95-3af40feac604",
        "value": "eipsverifys.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:05+00:00",
        "timestamp": "1786294805",
        "to_ids": true,
        "type": "domain",
        "uuid": "498e311b-affe-4ea4-896b-5243d7141e9e",
        "value": "emosqu.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:05+00:00",
        "timestamp": "1786294805",
        "to_ids": true,
        "type": "domain",
        "uuid": "ece22ab8-0b0a-457e-be0c-6e417f6ef3a1",
        "value": "emosqu.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:05+00:00",
        "timestamp": "1786294805",
        "to_ids": true,
        "type": "domain",
        "uuid": "053b81f2-1455-4c08-8ce2-61a945047492",
        "value": "external.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:05+00:00",
        "timestamp": "1786294806",
        "to_ids": true,
        "type": "domain",
        "uuid": "48726c0a-f4e0-4204-bb3a-681808aad391",
        "value": "iii8.xtfsqcm-12.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:06+00:00",
        "timestamp": "1786294806",
        "to_ids": true,
        "type": "domain",
        "uuid": "24382190-1c18-4f98-8614-535537bca2cb",
        "value": "internal.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:06+00:00",
        "timestamp": "1786294806",
        "to_ids": true,
        "type": "domain",
        "uuid": "7318c963-6994-4f37-9a58-e7174fc76bde",
        "value": "internal.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:06+00:00",
        "timestamp": "1786294806",
        "to_ids": true,
        "type": "domain",
        "uuid": "7eb118ee-4820-41df-b115-69f6dceb9fca",
        "value": "internal.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:06+00:00",
        "timestamp": "1786294806",
        "to_ids": true,
        "type": "domain",
        "uuid": "778ef263-9a78-44c8-a43d-55230228a51a",
        "value": "mhoisnths.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:06+00:00",
        "timestamp": "1786294806",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ef06764-66da-48de-a87b-2fd2eb9d3da2",
        "value": "ncodhjncheck.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:06+00:00",
        "timestamp": "1786294806",
        "to_ids": true,
        "type": "domain",
        "uuid": "dce4b164-d03e-41b4-9476-226e3a16756a",
        "value": "ncodhkcheck.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:06+00:00",
        "timestamp": "1786294807",
        "to_ids": true,
        "type": "domain",
        "uuid": "b14219c0-1b0a-4651-998a-09797ad53260",
        "value": "ncodhkncheck.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:07+00:00",
        "timestamp": "1786294807",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4af7301-21da-4df1-a9d6-8da5fcf8f47f",
        "value": "ncodhkpass.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:07+00:00",
        "timestamp": "1786294807",
        "to_ids": true,
        "type": "domain",
        "uuid": "25d8349c-42e1-444c-9c57-0f7a89706682",
        "value": "ncodhkverify.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:07+00:00",
        "timestamp": "1786294807",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b6e7d3f-7c25-4453-a91f-e93f383e1d7e",
        "value": "ndocbdcheck.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:07+00:00",
        "timestamp": "1786294807",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e375964-f03b-4f6b-9c97-76ac34b40d3f",
        "value": "ndocbecheck.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:07+00:00",
        "timestamp": "1786294807",
        "to_ids": true,
        "type": "domain",
        "uuid": "1df1f1b3-b501-4023-bbc5-fe6736354c12",
        "value": "nhis.internal.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:07+00:00",
        "timestamp": "1786294808",
        "to_ids": true,
        "type": "domain",
        "uuid": "345ff2e2-3274-4e5d-9e9f-48c274f77d9a",
        "value": "nhis.internal.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:08+00:00",
        "timestamp": "1786294808",
        "to_ids": true,
        "type": "domain",
        "uuid": "81ceda51-39fd-4923-b7b6-8ae35eb156f4",
        "value": "nhis.internal.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:08+00:00",
        "timestamp": "1786294808",
        "to_ids": true,
        "type": "domain",
        "uuid": "76ef7a4e-df66-43d3-8b85-d471df109d67",
        "value": "nhiyer.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:08+00:00",
        "timestamp": "1786294808",
        "to_ids": true,
        "type": "domain",
        "uuid": "d472b4d1-dd2d-43e4-871f-c0ba5203bcdd",
        "value": "nid-naverety.onthewifi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:08+00:00",
        "timestamp": "1786294808",
        "to_ids": true,
        "type": "domain",
        "uuid": "7384b7f1-a4c0-44b7-af2d-3c55a5593b5a",
        "value": "otp.mew.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:08+00:00",
        "timestamp": "1786294808",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5288172-faed-484b-9818-dc5490ce6dfb",
        "value": "xtfsqcm-12.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:08+00:00",
        "timestamp": "1786294809",
        "to_ids": false,
        "type": "url",
        "uuid": "db1d80dd-5541-4576-af2f-2b35a4fe8411",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/246410b16bace5dffe53f3737c1f018501c2b812",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:09+00:00",
        "timestamp": "1786294809",
        "to_ids": false,
        "type": "url",
        "uuid": "4f616336-1e2d-4e10-b990-d69f0dac38ae",
        "value": "https://x.com/cyberwar_15/status/2086442417197318279",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T17:00:09+00:00",
        "timestamp": "1786294809",
        "to_ids": true,
        "type": "domain",
        "uuid": "8986e7ec-0deb-4d8d-bde8-f27252cc0677",
        "value": "stoks.great-site.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:02+00:00",
        "timestamp": "1786298403",
        "to_ids": false,
        "type": "url",
        "uuid": "e919728e-4d66-4f10-bd1e-4a7917fdac71",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0a3bfbfa0ad263adc45627a66081e3a549ddeca5",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:03+00:00",
        "timestamp": "1786298403",
        "to_ids": false,
        "type": "url",
        "uuid": "a41c1369-d214-4a3d-bceb-9aa7112560b0",
        "value": "https://x.com/FatzQatz/status/2086307189631885558",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:03+00:00",
        "timestamp": "1786298403",
        "to_ids": true,
        "type": "domain",
        "uuid": "77990f4f-2826-4bcc-b6f5-2e280cd26003",
        "value": "backgroundr.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:03+00:00",
        "timestamp": "1786298403",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4c39c07-75fc-4f62-aea8-d72ee767e8e5",
        "value": "baikeliangju.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:04+00:00",
        "timestamp": "1786298404",
        "to_ids": true,
        "type": "domain",
        "uuid": "a158af75-2eb0-4292-8cd4-b20c0e1dbfb8",
        "value": "chuanqiweb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:04+00:00",
        "timestamp": "1786298404",
        "to_ids": true,
        "type": "domain",
        "uuid": "fade7bb2-5502-4439-939a-6053c10ec194",
        "value": "cpxxw.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:04+00:00",
        "timestamp": "1786298404",
        "to_ids": true,
        "type": "domain",
        "uuid": "030307bb-320e-4e19-9d0d-8e34aa419675",
        "value": "customsduty.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:04+00:00",
        "timestamp": "1786298405",
        "to_ids": true,
        "type": "domain",
        "uuid": "647eab45-c1cd-4481-a76c-11e1cb7164a8",
        "value": "danlook.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:05+00:00",
        "timestamp": "1786298405",
        "to_ids": true,
        "type": "domain",
        "uuid": "144c1ce7-df47-4d14-9e44-fd0aabc23047",
        "value": "dnfyb.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:05+00:00",
        "timestamp": "1786298405",
        "to_ids": true,
        "type": "domain",
        "uuid": "ceee8263-e39c-44bd-b415-4923eea16780",
        "value": "duoyuspa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:05+00:00",
        "timestamp": "1786298405",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c9ee10b-a448-4d07-aa4b-b9e6f328c1fb",
        "value": "dywwl.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:05+00:00",
        "timestamp": "1786298405",
        "to_ids": true,
        "type": "domain",
        "uuid": "09cbdda6-8c7b-443b-9063-61d9ec8f234f",
        "value": "gtqard.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:05+00:00",
        "timestamp": "1786298405",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2a11ac0-4d7d-470e-9702-98ed1432eaf8",
        "value": "jianziyun.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:05+00:00",
        "timestamp": "1786298406",
        "to_ids": true,
        "type": "domain",
        "uuid": "aab33dee-11d4-4867-9f31-189893cb1121",
        "value": "jsjjjskj.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:06+00:00",
        "timestamp": "1786298406",
        "to_ids": true,
        "type": "domain",
        "uuid": "83f5493c-9d0c-4f2e-a5c2-b36f1d8d8d07",
        "value": "jszrt.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:06+00:00",
        "timestamp": "1786298406",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbeca337-0dd8-460a-a1f9-3b50a2e9d573",
        "value": "kangyue.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:06+00:00",
        "timestamp": "1786298406",
        "to_ids": true,
        "type": "domain",
        "uuid": "67fb4f61-ddec-4dcf-9fce-6d46509cdc0f",
        "value": "kejiwei.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:06+00:00",
        "timestamp": "1786298406",
        "to_ids": true,
        "type": "domain",
        "uuid": "b37191f7-d08a-4642-93ac-9b1dabb0e05b",
        "value": "lepiaocloud.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:06+00:00",
        "timestamp": "1786298406",
        "to_ids": true,
        "type": "domain",
        "uuid": "da2aa003-ad00-4c79-bb0f-7b24bba79d69",
        "value": "meerlight.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:06+00:00",
        "timestamp": "1786298407",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf8e411c-8373-4052-98a1-effb29d5d563",
        "value": "nsseo.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:07+00:00",
        "timestamp": "1786298407",
        "to_ids": true,
        "type": "domain",
        "uuid": "b56466ba-0f8c-4e08-9163-ec54ae75ad6a",
        "value": "qinyoustudio.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:07+00:00",
        "timestamp": "1786298407",
        "to_ids": true,
        "type": "domain",
        "uuid": "05be7d27-b76f-424a-91af-d4bb3d8d28d6",
        "value": "rpaai.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:07+00:00",
        "timestamp": "1786298407",
        "to_ids": true,
        "type": "domain",
        "uuid": "b402d40a-cfa3-48c8-8d26-3b5af41af6f6",
        "value": "ruiyazhubao.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:07+00:00",
        "timestamp": "1786298407",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe8bded3-f290-4d69-8ab1-26b23daea06b",
        "value": "shhswz.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:07+00:00",
        "timestamp": "1786298407",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7822d1f-86b0-4699-8737-4dc5b233780c",
        "value": "suoguan.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:07+00:00",
        "timestamp": "1786298408",
        "to_ids": true,
        "type": "domain",
        "uuid": "d26e3c3d-dcd5-45e9-8691-9069e7657586",
        "value": "tanlianmeng.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:08+00:00",
        "timestamp": "1786298408",
        "to_ids": true,
        "type": "domain",
        "uuid": "51eed986-88b0-47c2-9b64-2bd47c40db7c",
        "value": "taobaoker.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:08+00:00",
        "timestamp": "1786298408",
        "to_ids": true,
        "type": "domain",
        "uuid": "b21e8261-afd4-48e2-b9aa-2178b2d640c1",
        "value": "tjdkmm.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:08+00:00",
        "timestamp": "1786298408",
        "to_ids": true,
        "type": "domain",
        "uuid": "68968120-d750-43d7-a251-ee89e27bd37c",
        "value": "tnbls.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:08+00:00",
        "timestamp": "1786298408",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5eae754-da95-4b4c-8108-6aa429e14395",
        "value": "usheng.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:08+00:00",
        "timestamp": "1786298408",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a41b7d6-aadf-49eb-8dd7-7ff8fdeacdf5",
        "value": "wayaya.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:08+00:00",
        "timestamp": "1786298409",
        "to_ids": true,
        "type": "domain",
        "uuid": "60815d58-79d2-434d-9606-c73b5475f777",
        "value": "xierwei.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:09+00:00",
        "timestamp": "1786298409",
        "to_ids": true,
        "type": "domain",
        "uuid": "f10537f5-0b37-49a1-a17c-e63473271d2b",
        "value": "yakin.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:09+00:00",
        "timestamp": "1786298409",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dda6427-8f5b-4cae-b7e7-531d1031d5e9",
        "value": "yalers.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T18:00:09+00:00",
        "timestamp": "1786298409",
        "to_ids": true,
        "type": "domain",
        "uuid": "5148cf86-9fd1-4048-ad6f-2b4eee51b069",
        "value": "zbrhcggp.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:03+00:00",
        "timestamp": "1786302003",
        "to_ids": false,
        "type": "url",
        "uuid": "9894bbdf-ba43-4b49-a0ba-219644e277b8",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e77491da6eca6364d0feef23c5c40bc1bf318d07",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:03+00:00",
        "timestamp": "1786302003",
        "to_ids": false,
        "type": "url",
        "uuid": "aae2cb17-ff90-42b9-9787-cf8d8cd8d125",
        "value": "https://x.com/Malwarehunterr/status/2086517188085871074",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:03+00:00",
        "timestamp": "1786302003",
        "to_ids": true,
        "type": "domain",
        "uuid": "c03c4b1e-bd8a-46dc-b63f-bf7397db3f11",
        "value": "ai.sadman.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:03+00:00",
        "timestamp": "1786302004",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd8ad062-699a-4f47-953b-b39da018fcda",
        "value": "captha-resolv.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:04+00:00",
        "timestamp": "1786302004",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed002ae7-ce7a-4e9e-956b-a99d5b7445aa",
        "value": "cardmallexperience.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:04+00:00",
        "timestamp": "1786302004",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7a39797-573e-4ddc-aecd-51ada05eaa67",
        "value": "freeaura.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:04+00:00",
        "timestamp": "1786302004",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0caa9cd-e526-4c8f-ac5a-68abec5b1de3",
        "value": "laaroma.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:04+00:00",
        "timestamp": "1786302004",
        "to_ids": true,
        "type": "domain",
        "uuid": "04d9a666-3cfa-48fb-ba70-35009720ab71",
        "value": "laaroma.online.middleeastfragrances.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:04+00:00",
        "timestamp": "1786302004",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0349691-f47a-47cf-9fdd-fab3a7a5c588",
        "value": "laaroma.store",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:05+00:00",
        "timestamp": "1786302005",
        "to_ids": true,
        "type": "domain",
        "uuid": "93925161-32f2-4193-8934-85c9bf9a94eb",
        "value": "laaroma.store.middleeastfragrances.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:05+00:00",
        "timestamp": "1786302005",
        "to_ids": true,
        "type": "domain",
        "uuid": "27c25665-369d-49bf-92ca-1c9f2e8d793e",
        "value": "mail.middleeastfragrances.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:05+00:00",
        "timestamp": "1786302005",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dd587a4-1e38-4cfe-b6b1-13600073e0ce",
        "value": "mail.middleeastfragrances.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:05+00:00",
        "timestamp": "1786302005",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4e63d15-d1c0-463f-8e8d-77ee6946d6de",
        "value": "mail.middleeastfragrances.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:05+00:00",
        "timestamp": "1786302005",
        "to_ids": true,
        "type": "domain",
        "uuid": "7592088e-a675-4ec4-9bf6-b05ed65ee2a7",
        "value": "mail.middleeastfragrances.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:05+00:00",
        "timestamp": "1786302005",
        "to_ids": true,
        "type": "domain",
        "uuid": "29b3ca78-8243-4f01-9796-b0212902eb98",
        "value": "mail.middleeastfragrances.store",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:05+00:00",
        "timestamp": "1786302006",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f660aab-d919-4de3-9dd6-c2e48cdb74e1",
        "value": "middleeastfragrances.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:06+00:00",
        "timestamp": "1786302006",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7e59a67-4834-4a80-928b-746f43aaaef6",
        "value": "middleeastfragrances.cyou.middleeastfragrances.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:06+00:00",
        "timestamp": "1786302006",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ce2bd37-7547-4cae-924e-7c2516297694",
        "value": "middleeastfragrances.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:06+00:00",
        "timestamp": "1786302006",
        "to_ids": true,
        "type": "domain",
        "uuid": "aeed295c-a931-49db-a30f-0120ad6eb849",
        "value": "middleeastfragrances.online.middleeastfragrances.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:06+00:00",
        "timestamp": "1786302006",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f988957-e8b3-4edd-9442-ee911ec6bf69",
        "value": "middleeastfragrances.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:06+00:00",
        "timestamp": "1786302006",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec04129d-f412-4946-bf63-b843122b0a38",
        "value": "middleeastfragrances.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:06+00:00",
        "timestamp": "1786302007",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8cd9ec8-a882-4136-926a-e5b8f8df88d3",
        "value": "middleeastfragrances.site.middleeastfragrances.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:07+00:00",
        "timestamp": "1786302007",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce67b026-de9c-4717-b9a6-d09e2df78099",
        "value": "middleeastfragrances.store",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:07+00:00",
        "timestamp": "1786302007",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0abea33-884f-4714-959d-ded8157b957c",
        "value": "middleeastfragrances.store.middleeastfragrances.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:07+00:00",
        "timestamp": "1786302007",
        "to_ids": true,
        "type": "domain",
        "uuid": "80c8725c-3d93-47bc-a0b8-87086c5bcc66",
        "value": "middleeastfragrances.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:07+00:00",
        "timestamp": "1786302007",
        "to_ids": true,
        "type": "domain",
        "uuid": "16d8a7c1-4238-4ff9-966b-920978807ba0",
        "value": "middleeastfragrances.website.middleeastfragrances.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:07+00:00",
        "timestamp": "1786302007",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cf42aaf-f958-4e18-91cf-e028c47f937f",
        "value": "ownnewstoday.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:07+00:00",
        "timestamp": "1786302008",
        "to_ids": true,
        "type": "domain",
        "uuid": "92fee370-ec22-42b2-ab21-e7932b6b014c",
        "value": "sadman.vip",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:08+00:00",
        "timestamp": "1786302008",
        "to_ids": true,
        "type": "domain",
        "uuid": "57a088b9-0cf7-4baa-8797-7dd809aeb45a",
        "value": "site-nblock.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:08+00:00",
        "timestamp": "1786302008",
        "to_ids": true,
        "type": "domain",
        "uuid": "413bb0c6-2ed5-4a1f-aeb7-e8be1dd875a5",
        "value": "testmyopinion.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T19:00:08+00:00",
        "timestamp": "1786302008",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b744b12-5396-4d48-a925-d3d935f7369c",
        "value": "verifytmy.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:03+00:00",
        "timestamp": "1786305603",
        "to_ids": false,
        "type": "url",
        "uuid": "7702d559-def0-4b36-b56b-0260094a1e99",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/34acd3e4dcec134ace0e03fcd2acf4ac4616cc9f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:03+00:00",
        "timestamp": "1786305604",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce21304c-de41-4db8-af6e-e903236efd33",
        "value": "aleo.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:04+00:00",
        "timestamp": "1786305604",
        "to_ids": true,
        "type": "domain",
        "uuid": "907b78b6-8dfa-40ea-81ea-9867e2a5767c",
        "value": "anhyer.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:04+00:00",
        "timestamp": "1786305604",
        "to_ids": true,
        "type": "domain",
        "uuid": "067e6de2-3153-4a7c-8e4e-02b3f044b9a7",
        "value": "anhyer.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:04+00:00",
        "timestamp": "1786305604",
        "to_ids": true,
        "type": "domain",
        "uuid": "f50c6104-db91-4c7f-827f-1db3d13f416b",
        "value": "arped.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:04+00:00",
        "timestamp": "1786305604",
        "to_ids": true,
        "type": "domain",
        "uuid": "e57433b9-c495-49ac-aad5-c2274551d2f5",
        "value": "edoc.external.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:04+00:00",
        "timestamp": "1786305605",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b2802ae-0570-47cd-8d43-815269c4778a",
        "value": "eipsalr.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:05+00:00",
        "timestamp": "1786305605",
        "to_ids": true,
        "type": "domain",
        "uuid": "62fef14b-b498-42b5-9ed1-b30c98297fd9",
        "value": "eosips.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:05+00:00",
        "timestamp": "1786305605",
        "to_ids": true,
        "type": "domain",
        "uuid": "abce5580-f3e4-4612-b8c0-18216489650c",
        "value": "etnhisre.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:05+00:00",
        "timestamp": "1786305605",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0915b91-67a1-40ea-ad85-f24769dcd900",
        "value": "external.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:05+00:00",
        "timestamp": "1786305605",
        "to_ids": true,
        "type": "domain",
        "uuid": "26552f54-737e-45d4-af99-23f5755cc306",
        "value": "external.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:06+00:00",
        "timestamp": "1786305606",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf103abb-bb0a-4f93-95c1-9eaa019629f6",
        "value": "hsmdhosim.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:06+00:00",
        "timestamp": "1786305606",
        "to_ids": true,
        "type": "domain",
        "uuid": "0327fc95-38fb-408d-b293-220df31c31d4",
        "value": "internal.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:06+00:00",
        "timestamp": "1786305606",
        "to_ids": true,
        "type": "domain",
        "uuid": "2844f508-54a1-4aea-8714-e6b40b656010",
        "value": "mfandnsdc.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:06+00:00",
        "timestamp": "1786305606",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d77ecef-b9fc-4e09-a1cf-56cc906825ff",
        "value": "mmm.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:06+00:00",
        "timestamp": "1786305606",
        "to_ids": true,
        "type": "domain",
        "uuid": "cecbbc90-7879-4a10-bce3-9d422c5ebced",
        "value": "moisdcdns.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:06+00:00",
        "timestamp": "1786305606",
        "to_ids": true,
        "type": "domain",
        "uuid": "44a4226b-ece7-454f-aa88-a1d63245a027",
        "value": "moiserq.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:07+00:00",
        "timestamp": "1786305607",
        "to_ids": true,
        "type": "domain",
        "uuid": "482f7f43-466d-4513-b635-92709fa4e3d6",
        "value": "moiserq.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:07+00:00",
        "timestamp": "1786305607",
        "to_ids": true,
        "type": "domain",
        "uuid": "cddeed19-77da-48b8-ae53-a3e9fd6af04e",
        "value": "myinvoicelist.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:07+00:00",
        "timestamp": "1786305607",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ffe9d71-466c-426b-b045-104a0bcf0187",
        "value": "myinvoicelists.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:07+00:00",
        "timestamp": "1786305607",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca9f24de-ac40-4e1a-aa18-bd6fd1004658",
        "value": "ncodhjverify.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:07+00:00",
        "timestamp": "1786305607",
        "to_ids": true,
        "type": "domain",
        "uuid": "90d84105-aaa8-44ac-bc7e-614917388fcf",
        "value": "ncodhkccheck.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:07+00:00",
        "timestamp": "1786305607",
        "to_ids": true,
        "type": "domain",
        "uuid": "64c7dd37-bff7-4050-a6eb-51bc1bfdc50e",
        "value": "ncodhlccheck.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:07+00:00",
        "timestamp": "1786305608",
        "to_ids": true,
        "type": "domain",
        "uuid": "d04fae41-38ed-4eae-993a-1b4bc2fd9cef",
        "value": "ncodhlpass.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:08+00:00",
        "timestamp": "1786305608",
        "to_ids": true,
        "type": "domain",
        "uuid": "40b3f008-b81d-4330-84d0-606326bcbd0e",
        "value": "ncodhlverify.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:08+00:00",
        "timestamp": "1786305608",
        "to_ids": true,
        "type": "domain",
        "uuid": "5109de6c-1cd6-4e1f-81b4-19cd916413ba",
        "value": "ncodhmccheck.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:08+00:00",
        "timestamp": "1786305608",
        "to_ids": true,
        "type": "domain",
        "uuid": "52d0133d-34ff-4bb9-bb2c-aafdfa5df1e9",
        "value": "ncodhmpass.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:08+00:00",
        "timestamp": "1786305608",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f9a1055-b80d-42e7-9841-ea4fd296aa4d",
        "value": "ncodhmverify.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:08+00:00",
        "timestamp": "1786305608",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d1588ce-bf6e-4936-867f-8b5171649f71",
        "value": "ndistmdoc.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:08+00:00",
        "timestamp": "1786305609",
        "to_ids": true,
        "type": "domain",
        "uuid": "63d7adb6-9f02-4684-a9ca-ad78bd63b04f",
        "value": "ndocajcheck.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:09+00:00",
        "timestamp": "1786305609",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3ce405f-b368-42c6-a790-13603071d297",
        "value": "ndocapcheck.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:09+00:00",
        "timestamp": "1786305609",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1deaeca-3683-4717-b50c-11b33095cfdf",
        "value": "nhis.edoc.external.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:09+00:00",
        "timestamp": "1786305609",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4029aeb-f5c7-45fb-8a3d-52ade6a370ae",
        "value": "nhis.edoc.external.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:09+00:00",
        "timestamp": "1786305609",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fcce8d2-e8d6-4a95-a141-819fc234c0d6",
        "value": "nhis.external.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:09+00:00",
        "timestamp": "1786305609",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c770bb1-0bc4-4ace-bb38-59eb5b841930",
        "value": "nhis.external.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:09+00:00",
        "timestamp": "1786305610",
        "to_ids": true,
        "type": "domain",
        "uuid": "23ace136-7359-4f2f-bf66-78fd54f3c679",
        "value": "nhis.internal.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:10+00:00",
        "timestamp": "1786305610",
        "to_ids": true,
        "type": "domain",
        "uuid": "6209ee94-a2e4-4915-a178-b7a0b8096811",
        "value": "nhis.mmm.mmm.mmm.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:10+00:00",
        "timestamp": "1786305610",
        "to_ids": true,
        "type": "domain",
        "uuid": "67e8c0ab-8e86-4569-a541-a7bfbdf08cc2",
        "value": "nhisyes.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:10+00:00",
        "timestamp": "1786305610",
        "to_ids": true,
        "type": "domain",
        "uuid": "12885bdf-d83a-4365-ad36-bda761bdf379",
        "value": "nhiyer.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:10+00:00",
        "timestamp": "1786305610",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b249a70-8c81-4a0e-b401-3b2a62f9d017",
        "value": "nhmethodpost.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:10+00:00",
        "timestamp": "1786305610",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e15153d-1bad-4201-be7f-5b8573ceec14",
        "value": "nhmethodposts.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:10+00:00",
        "timestamp": "1786305611",
        "to_ids": true,
        "type": "domain",
        "uuid": "655048c5-2748-4a16-b28e-eac67752dbac",
        "value": "nipipes.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:11+00:00",
        "timestamp": "1786305611",
        "to_ids": true,
        "type": "domain",
        "uuid": "2011eb98-6e7a-407b-b38e-3f0681d2bdfe",
        "value": "nmalistdc.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:11+00:00",
        "timestamp": "1786305611",
        "to_ids": true,
        "type": "domain",
        "uuid": "359dc009-db16-449c-8bfa-b0e9c28af0c4",
        "value": "nsamhoism.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:11+00:00",
        "timestamp": "1786305611",
        "to_ids": true,
        "type": "domain",
        "uuid": "53f01fe8-c246-4ac8-8422-556924da7c08",
        "value": "nsdimsnth.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:11+00:00",
        "timestamp": "1786305611",
        "to_ids": true,
        "type": "domain",
        "uuid": "5664c5e2-b4c2-41c2-9a99-bdc4a13a2aa4",
        "value": "ntesyh.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:11+00:00",
        "timestamp": "1786305611",
        "to_ids": true,
        "type": "domain",
        "uuid": "c98c10a8-e598-4be4-b74b-7899506a72a2",
        "value": "ntpaymentrec.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:11+00:00",
        "timestamp": "1786305612",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a1ffa2c-7b68-4362-932f-30da9af89eba",
        "value": "ntpaymentrecs.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:12+00:00",
        "timestamp": "1786305612",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ad4fd3b-8080-4b83-86bd-b0a60a4e7074",
        "value": "ntxarped.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:12+00:00",
        "timestamp": "1786305612",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1f47f4b-14b0-4092-90fa-79ba2f2299f2",
        "value": "piecoes.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:12+00:00",
        "timestamp": "1786305612",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ccb457c-7fed-4845-82a3-38b6bd08753e",
        "value": "schecksnd.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "bot_zbtlink",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:12+00:00",
        "timestamp": "1786305612",
        "to_ids": false,
        "type": "url",
        "uuid": "66343bf9-865a-4c7d-871c-64f4cf686548",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b84cb4f70383e8fc8f14bd4ffc4fa682ba6162a3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "bot_zbtlink",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:12+00:00",
        "timestamp": "1786305612",
        "to_ids": false,
        "type": "url",
        "uuid": "6fc9ffd1-8cce-4fc7-accf-02f6c01a7711",
        "value": "https://www.vulncheck.com/blog/zbt-endlessdoors",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "bot_zbtlink",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:12+00:00",
        "timestamp": "1786305613",
        "to_ids": false,
        "type": "url",
        "uuid": "24bcd279-49e7-4117-9ba5-f61b1c47175b",
        "value": "https://www.virustotal.com/gui/ip-address/43.248.136.125/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bot_zbtlink",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:13+00:00",
        "timestamp": "1786305613",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b7487cb5-2445-474b-883e-cd7983187a5b",
        "value": "43.248.136.125",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bot_zbtlink",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:13+00:00",
        "timestamp": "1786305613",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "10e5455d-d569-45c4-8bfc-6a2fc061f406",
        "value": "47.107.224.89",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bot_zbtlink",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:14+00:00",
        "timestamp": "1786305614",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbda32d2-7052-4f5f-aa64-7015bae46e46",
        "value": "i1ky6r1rx0uf.dynamic-dns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bot_zbtlink",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:14+00:00",
        "timestamp": "1786305614",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a376573-0b7b-4745-ae4b-cce9153f7619",
        "value": "online-string.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bot_zbtlink",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:14+00:00",
        "timestamp": "1786305614",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cd1243f-8e1d-42f1-9eff-7d3bfd7cc8a8",
        "value": "rbdg4nzqadui.wikaba.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bot_zbtlink",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-09T20:00:14+00:00",
        "timestamp": "1786305615",
        "to_ids": true,
        "type": "domain",
        "uuid": "48fe5148-fc66-4908-8269-fcd3375b6073",
        "value": "zbtctl.epplink.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}