{
  "Event": {
    "analysis": "1",
    "date": "2026-03-20",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-03-20",
    "publish_timestamp": "1774047614",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1774047613",
    "uuid": "150c533e-552d-4e7f-8894-9d9ecf852a72",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:03+00:00",
        "timestamp": "1773990003",
        "to_ids": false,
        "type": "url",
        "uuid": "67b977af-30e5-4447-8247-2e99b8d408c7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/75af25b64e52e999f038c6e3d9b1ae3768ff1a80",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:04+00:00",
        "timestamp": "1773990004",
        "to_ids": true,
        "type": "domain",
        "uuid": "4baec070-b233-4622-ba6a-b6387f29a8a4",
        "value": "freegift-pump.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:04+00:00",
        "timestamp": "1773990004",
        "to_ids": false,
        "type": "url",
        "uuid": "abc1dda8-96a1-46b2-a017-0b52df04e7cc",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ce6c9264f1cfa0e1b65339d2e394e5f7d16ccfbe",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:04+00:00",
        "timestamp": "1773990004",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fd3f439-4af4-4f62-82ca-4d3cae086f25",
        "value": "muyo.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:04+00:00",
        "timestamp": "1773990004",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddee0814-2f2a-4580-97a7-c35670f8382c",
        "value": "seblu.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:04+00:00",
        "timestamp": "1773990004",
        "to_ids": false,
        "type": "url",
        "uuid": "f3ed9593-f36f-4df5-b292-fe0920eee248",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9f218e5cea0fa3d5ea176fec1f2e68899b9ffc08",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:04+00:00",
        "timestamp": "1773990005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "983b704b-b616-42f2-ad3b-35e85ebdb75e",
        "value": "135.181.138.114",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:05+00:00",
        "timestamp": "1773990005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "08c13957-70fc-4970-9906-d36fe8548936",
        "value": "141.11.197.133",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:05+00:00",
        "timestamp": "1773990005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "ebace0d9-1917-4b01-95e7-6f37701d9ce9",
        "value": "144.31.159.15",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:05+00:00",
        "timestamp": "1773990005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6312f58c-548c-4e6c-956c-c83f93271f68",
        "value": "146.103.126.131",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:06+00:00",
        "timestamp": "1773990006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4f3a9202-6e98-448f-9cdb-85103dc6f875",
        "value": "178.16.53.124",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:06+00:00",
        "timestamp": "1773990006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "9befed27-82be-4f4a-bffd-e76237edd0fc",
        "value": "46.149.78.104",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:06+00:00",
        "timestamp": "1773990006",
        "to_ids": false,
        "type": "url",
        "uuid": "b13e4c47-b379-4c55-80a2-f35cb5f19c56",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/708cf9a8347146d4d77aceae1470235863f01b96",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:06+00:00",
        "timestamp": "1773990007",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "bd263875-d8d4-43c2-b3b5-ba4bbed00066",
        "value": "45.59.160.200",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:07+00:00",
        "timestamp": "1773990007",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e4bd71d-acdc-418f-925d-77e32aff9612",
        "value": "app.vereoy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:07+00:00",
        "timestamp": "1773990007",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc9c8cd7-0e2b-430e-a7a4-41360f8ce1d3",
        "value": "vereoy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:07+00:00",
        "timestamp": "1773990007",
        "to_ids": false,
        "type": "url",
        "uuid": "ed1c62e3-0be0-4477-852d-69e57dbebf03",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7e208279cae34c90963b56ce616680749023e1f1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:07+00:00",
        "timestamp": "1773990007",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "37cf66dc-1eef-4cb7-881e-a8b3a2f470df",
        "value": "64.118.144.89",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:07+00:00",
        "timestamp": "1773990007",
        "to_ids": false,
        "type": "url",
        "uuid": "2298c9cd-aa63-4aa5-a170-2a783375f921",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0fe8b5707c9c34aba558fc47bfdf2329f3fc5c9e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:07+00:00",
        "timestamp": "1773990007",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d1ab417-bea7-40bf-95ba-e939b60c9f75",
        "value": "mypurplemanager.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:08+00:00",
        "timestamp": "1773990008",
        "to_ids": false,
        "type": "url",
        "uuid": "d6f78cda-5550-492b-a519-8e648d25becc",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9253e87c4f4ab7cf486b044c4d82e3d2f95aa1ec",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:08+00:00",
        "timestamp": "1773990008",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f82b647-a31b-42a5-9f12-810aaa1f0f72",
        "value": "interactionsystems.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T07:00:08+00:00",
        "timestamp": "1773990008",
        "to_ids": true,
        "type": "domain",
        "uuid": "60d5b9d6-e0d6-4639-9189-f814d26718a0",
        "value": "api.interactionsystems.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:03+00:00",
        "timestamp": "1773997203",
        "to_ids": false,
        "type": "url",
        "uuid": "adbd2b51-63b5-4d98-bfd9-d0f158bc4991",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f61b6543dbfec1d7c00ae52606ecff7f90741fff",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:03+00:00",
        "timestamp": "1773997205",
        "to_ids": false,
        "type": "url",
        "uuid": "efb43d1d-19d0-4640-b001-3b2b21764f03",
        "value": "https://x.com/FatzQatz/status/2034846071369998693",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:05+00:00",
        "timestamp": "1773997205",
        "to_ids": false,
        "type": "url",
        "uuid": "9270c888-6b8c-4893-bd87-d906fbd214b1",
        "value": "https://www.virustotal.com/gui/file/7e9171fa04a9019727f31dfb23e735cfc63daf01788cfaeb809705e926173ac4/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:05+00:00",
        "timestamp": "1773997205",
        "to_ids": true,
        "type": "domain",
        "uuid": "70c504f3-a303-4bf7-9aaf-f0d3efd15d4d",
        "value": "fix-bkg.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:05+00:00",
        "timestamp": "1773997206",
        "to_ids": false,
        "type": "url",
        "uuid": "0d4da1f0-3695-4cd3-8134-ad52db3bf0f1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b751bde94fd77c2aec3dd0e7fb44319590d2d45d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:06+00:00",
        "timestamp": "1773997206",
        "to_ids": false,
        "type": "url",
        "uuid": "fae07101-5d5e-425b-940a-6de2ea978f02",
        "value": "https://www.virustotal.com/gui/ip-address/37.77.150.152/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:06+00:00",
        "timestamp": "1773997206",
        "to_ids": true,
        "type": "domain",
        "uuid": "9df2cc44-5586-4120-8159-4f66a2f5dd8e",
        "value": "sing-in-token-op.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:06+00:00",
        "timestamp": "1773997207",
        "to_ids": true,
        "type": "domain",
        "uuid": "233f558a-fa8c-483f-9601-0257c7f380c7",
        "value": "web-extranet-sign-in.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:07+00:00",
        "timestamp": "1773997207",
        "to_ids": false,
        "type": "url",
        "uuid": "35d151af-ae2e-4b86-91ef-6fdb3628db6e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/75c01a1d7e872e847f586a9b509d4047534c7cee",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:07+00:00",
        "timestamp": "1773997207",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0840faa-9de9-4a83-93bd-a4b996383acc",
        "value": "neverserver.o-r.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:07+00:00",
        "timestamp": "1773997207",
        "to_ids": false,
        "type": "url",
        "uuid": "de15a3ca-4f42-4f5f-ac4b-b89397c26494",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/93466656b2fbc0c0f12f83a202c6f99074859028",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:07+00:00",
        "timestamp": "1773997207",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1e115da-7b7e-484d-bd90-8c055453f968",
        "value": "nid-navertca.servehalflife.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T09:00:07+00:00",
        "timestamp": "1773997207",
        "to_ids": true,
        "type": "domain",
        "uuid": "32d42d7f-25ae-4d0d-b744-08aeb2633890",
        "value": "reconfirm.neverserver.o-r.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:03+00:00",
        "timestamp": "1774000803",
        "to_ids": false,
        "type": "url",
        "uuid": "9735affb-d945-43f6-a2e6-19e8cf70c5b1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e0cd8298220459ece185159381d4d04f95123bfc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:03+00:00",
        "timestamp": "1774000803",
        "to_ids": false,
        "type": "url",
        "uuid": "83fcdd46-1847-4058-a90a-580b911dd5f3",
        "value": "https://www.virustotal.com/gui/file/0056158ca57072b0ebf2b2a45a5991e1f81d4daaf8d38503206b7d5c0304c399/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:03+00:00",
        "timestamp": "1774000803",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecfd96fb-810e-4822-8329-a515b8da1ebf",
        "value": "achievershelf.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:03+00:00",
        "timestamp": "1774000804",
        "to_ids": true,
        "type": "domain",
        "uuid": "08828f4a-8b2e-4c07-87c5-eeab000d5885",
        "value": "actioncompany.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:04+00:00",
        "timestamp": "1774000804",
        "to_ids": true,
        "type": "domain",
        "uuid": "e69e236e-a1ba-46c4-8294-f39b438c7328",
        "value": "actiondistribution.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:04+00:00",
        "timestamp": "1774000804",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebbc1c5a-a231-4b17-bece-47fe9117081f",
        "value": "activitykitty.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:04+00:00",
        "timestamp": "1774000804",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbc3996c-745a-499f-80c3-4478d60888fb",
        "value": "activitytin.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:04+00:00",
        "timestamp": "1774000804",
        "to_ids": true,
        "type": "domain",
        "uuid": "d58d9147-5fea-498e-9916-9c8dc8a07662",
        "value": "activitytop.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:05+00:00",
        "timestamp": "1774000805",
        "to_ids": true,
        "type": "domain",
        "uuid": "65afa3c8-b280-489e-aeba-0cc295f223bd",
        "value": "additionmouth.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:05+00:00",
        "timestamp": "1774000805",
        "to_ids": true,
        "type": "domain",
        "uuid": "43fdeca8-39c8-4aee-a532-735892b41ffe",
        "value": "advertisementnoise.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:05+00:00",
        "timestamp": "1774000805",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ea2b890-567e-4451-acf2-5ff3a968c4ef",
        "value": "advicecanvas.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:05+00:00",
        "timestamp": "1774000805",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d112748-5e2c-419f-b25e-48e547aa148f",
        "value": "adviceturn.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:05+00:00",
        "timestamp": "1774000805",
        "to_ids": true,
        "type": "domain",
        "uuid": "93817fd2-49ca-48a7-bac0-0fb9d00d24a4",
        "value": "aftermathargument.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:05+00:00",
        "timestamp": "1774000805",
        "to_ids": true,
        "type": "domain",
        "uuid": "da9a2b58-87d2-443d-8c72-2f49b650d34d",
        "value": "aftermathday.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:05+00:00",
        "timestamp": "1774000806",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee87ede8-b89a-459b-b639-1f13df5443c0",
        "value": "aftermathmonkey.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:06+00:00",
        "timestamp": "1774000806",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f9b1c1e-6d25-4ca6-b3f5-a6bea6f9be8b",
        "value": "aftermathsign.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:06+00:00",
        "timestamp": "1774000806",
        "to_ids": true,
        "type": "domain",
        "uuid": "897183b5-99a6-4b76-b8c0-099b4c9b0160",
        "value": "afternoonminister.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:06+00:00",
        "timestamp": "1774000806",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6923de7-0abe-4090-8610-d9787e9e0424",
        "value": "afternoonscrew.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:06+00:00",
        "timestamp": "1774000806",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7623eae-a653-4021-86de-54a339374425",
        "value": "afternoonwash.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:06+00:00",
        "timestamp": "1774000807",
        "to_ids": true,
        "type": "domain",
        "uuid": "e29d3226-9b38-4afd-8b11-4c5b16422554",
        "value": "airplaneiron.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:07+00:00",
        "timestamp": "1774000807",
        "to_ids": true,
        "type": "domain",
        "uuid": "b86b8267-a6df-4efa-bf5f-9ce60869421e",
        "value": "airplanerock.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:07+00:00",
        "timestamp": "1774000807",
        "to_ids": true,
        "type": "domain",
        "uuid": "09043de5-bcbe-46f4-b047-746176a0c008",
        "value": "airtwig.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:07+00:00",
        "timestamp": "1774000807",
        "to_ids": true,
        "type": "domain",
        "uuid": "6af695f3-83a4-4238-b5f4-6e55b1c6b14a",
        "value": "amountafternoon.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:07+00:00",
        "timestamp": "1774000807",
        "to_ids": true,
        "type": "domain",
        "uuid": "aee46e89-7d31-43f0-b0b0-2841dc664c19",
        "value": "amountboy.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:07+00:00",
        "timestamp": "1774000807",
        "to_ids": true,
        "type": "domain",
        "uuid": "e69df502-d22e-4ccc-9017-550d97d424a3",
        "value": "amusementeducation.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:07+00:00",
        "timestamp": "1774000808",
        "to_ids": true,
        "type": "domain",
        "uuid": "8095c95b-1477-4b1e-8a2f-7e4681c8b6a8",
        "value": "animalact.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:08+00:00",
        "timestamp": "1774000808",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3ac9163-edf0-4725-8256-97eeb01062ae",
        "value": "animalrecord.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:08+00:00",
        "timestamp": "1774000808",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8275212-68b1-4215-925d-e70b3037fa6c",
        "value": "apparatustaste.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:08+00:00",
        "timestamp": "1774000808",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1a3a0a7-90d7-45c6-9d1a-96467d352b83",
        "value": "apparatustruck.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:08+00:00",
        "timestamp": "1774000808",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b899692-9ff8-4b4e-8608-175edd3ac0bc",
        "value": "apparelwound.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:08+00:00",
        "timestamp": "1774000808",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee73298e-cd10-41f6-82f4-1a82c7903cc5",
        "value": "approvalearthquake.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:08+00:00",
        "timestamp": "1774000809",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b14e4c8-0a9c-4009-ad78-dede92c878ed",
        "value": "archachiever.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:09+00:00",
        "timestamp": "1774000809",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ae87214-9240-41a5-bc17-7363befe728b",
        "value": "archairport.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:09+00:00",
        "timestamp": "1774000809",
        "to_ids": true,
        "type": "domain",
        "uuid": "1118770c-234e-42c6-ae64-a347b53e7ae2",
        "value": "archchange.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:09+00:00",
        "timestamp": "1774000809",
        "to_ids": true,
        "type": "domain",
        "uuid": "0266edc3-01ec-4e75-b7fb-22d37066189a",
        "value": "argumenteggnog.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:09+00:00",
        "timestamp": "1774000809",
        "to_ids": true,
        "type": "domain",
        "uuid": "7de8d19e-ce4d-4459-8b03-8d0bb1e4a8fa",
        "value": "armcard.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:09+00:00",
        "timestamp": "1774000809",
        "to_ids": true,
        "type": "domain",
        "uuid": "e02f4801-8d4d-4da8-a0e6-f734b5bc5ecb",
        "value": "armyshoe.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:09+00:00",
        "timestamp": "1774000809",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1f5529d-de38-478f-a27b-19342e90cb5b",
        "value": "attractionprice.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:10+00:00",
        "timestamp": "1774000810",
        "to_ids": true,
        "type": "domain",
        "uuid": "6365519a-7294-4a9d-a1a0-6c23f2a92815",
        "value": "attractionseashore.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:10+00:00",
        "timestamp": "1774000810",
        "to_ids": true,
        "type": "domain",
        "uuid": "f67d8f90-1d95-4117-8d10-0ef83d55ab64",
        "value": "attractionvacation.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:10+00:00",
        "timestamp": "1774000810",
        "to_ids": true,
        "type": "domain",
        "uuid": "41972119-588b-4386-877c-ce83628a2a1c",
        "value": "auntedge.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:10+00:00",
        "timestamp": "1774000810",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a384b46-3835-4da3-8847-ca947b9791ff",
        "value": "aunttest.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:10+00:00",
        "timestamp": "1774000810",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd9cdc5c-ecfa-4de7-a129-1d78e6960428",
        "value": "authoritywaste.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:10+00:00",
        "timestamp": "1774000810",
        "to_ids": true,
        "type": "domain",
        "uuid": "887d64df-fc82-4781-ae9e-811f5dc8e02d",
        "value": "babieschance.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:10+00:00",
        "timestamp": "1774000811",
        "to_ids": true,
        "type": "domain",
        "uuid": "c72a4686-9dc1-4ef6-84fb-c8871eb51ae3",
        "value": "babyhumor.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:11+00:00",
        "timestamp": "1774000811",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb4ecdb7-d526-4389-87a7-2a27355f664e",
        "value": "babyvein.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:11+00:00",
        "timestamp": "1774000811",
        "to_ids": true,
        "type": "domain",
        "uuid": "852cac36-7349-406b-943d-339c613a2187",
        "value": "backfruit.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:11+00:00",
        "timestamp": "1774000811",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcef335b-c328-4714-a19b-e2bc7c419897",
        "value": "backparty.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:11+00:00",
        "timestamp": "1774000811",
        "to_ids": true,
        "type": "domain",
        "uuid": "df33e10c-5462-4f41-b17e-4a55e6427056",
        "value": "badgepet.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:11+00:00",
        "timestamp": "1774000811",
        "to_ids": true,
        "type": "domain",
        "uuid": "20e22c90-6f14-4ec3-84cb-d030f878096e",
        "value": "badgeterritory.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:11+00:00",
        "timestamp": "1774000812",
        "to_ids": true,
        "type": "domain",
        "uuid": "8559a7d3-0a48-4340-a884-d710c1882b5b",
        "value": "bagcare.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:12+00:00",
        "timestamp": "1774000812",
        "to_ids": true,
        "type": "domain",
        "uuid": "cee2fcaf-a64e-4f39-a76c-6fadcc1c186a",
        "value": "baitaddition.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:12+00:00",
        "timestamp": "1774000812",
        "to_ids": true,
        "type": "domain",
        "uuid": "b308fdce-73ae-4999-8647-04519e4ed7cd",
        "value": "baitmetal.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:12+00:00",
        "timestamp": "1774000812",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3397f35-5722-405a-8360-1551fe000383",
        "value": "basevisitor.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:12+00:00",
        "timestamp": "1774000812",
        "to_ids": true,
        "type": "domain",
        "uuid": "18032c10-f206-43e8-8698-21daa6054332",
        "value": "basinpleasure.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:12+00:00",
        "timestamp": "1774000812",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8ff34bd-bbd7-433f-bed4-fe99562baaed",
        "value": "basinwound.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:12+00:00",
        "timestamp": "1774000813",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b5e9864-2216-4e13-843f-75828472cc46",
        "value": "basketballyear.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:13+00:00",
        "timestamp": "1774000813",
        "to_ids": true,
        "type": "domain",
        "uuid": "4de2d583-94db-4c18-af7b-84cfc846d5b2",
        "value": "batcrack.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:13+00:00",
        "timestamp": "1774000813",
        "to_ids": true,
        "type": "domain",
        "uuid": "642e96b3-6bc5-40fe-bc68-e475538916fb",
        "value": "bathsmile.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:13+00:00",
        "timestamp": "1774000813",
        "to_ids": true,
        "type": "domain",
        "uuid": "d20ee4f4-a432-44d0-88d1-217601290f4e",
        "value": "battleflesh.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:13+00:00",
        "timestamp": "1774000813",
        "to_ids": true,
        "type": "domain",
        "uuid": "e01d7238-e3fe-4bee-b0e5-94642a8f1021",
        "value": "battletaste.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:13+00:00",
        "timestamp": "1774000813",
        "to_ids": true,
        "type": "domain",
        "uuid": "38d5a540-526f-4d1e-9638-e52e792b0883",
        "value": "beadcemetery.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:13+00:00",
        "timestamp": "1774000813",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5e3c176-a29d-4c14-8f49-15937d644c9b",
        "value": "bedflight.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:14+00:00",
        "timestamp": "1774000814",
        "to_ids": true,
        "type": "domain",
        "uuid": "78cf7de5-6a1f-4dc9-a164-08b364253eb2",
        "value": "bedroomdesire.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:14+00:00",
        "timestamp": "1774000814",
        "to_ids": true,
        "type": "domain",
        "uuid": "46f12fca-39f8-414c-a667-4d1693061d95",
        "value": "bedroomeyes.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:14+00:00",
        "timestamp": "1774000814",
        "to_ids": true,
        "type": "domain",
        "uuid": "a50bdbcf-3783-419b-b485-6b184dde3e7c",
        "value": "beefteeth.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:14+00:00",
        "timestamp": "1774000814",
        "to_ids": true,
        "type": "domain",
        "uuid": "4df9417b-bde2-4ed4-85ad-ca84d5d8703f",
        "value": "beeftexture.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:14+00:00",
        "timestamp": "1774000814",
        "to_ids": true,
        "type": "domain",
        "uuid": "09c757dd-8de2-4b63-8a0f-be08c1699e00",
        "value": "beginnercakes.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:14+00:00",
        "timestamp": "1774000814",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce052dc7-0540-4e24-9e5e-874a40e1ebe8",
        "value": "beliefpicture.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:14+00:00",
        "timestamp": "1774000815",
        "to_ids": true,
        "type": "domain",
        "uuid": "67a7f914-1858-4c5c-a173-9b83da159793",
        "value": "believesisters.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:15+00:00",
        "timestamp": "1774000815",
        "to_ids": true,
        "type": "domain",
        "uuid": "1cc36947-61cd-4848-9dfa-46bd7d4cf513",
        "value": "bellhook.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:15+00:00",
        "timestamp": "1774000815",
        "to_ids": true,
        "type": "domain",
        "uuid": "37cbfc82-1907-4cbc-910a-690ad581828f",
        "value": "bellplayground.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:15+00:00",
        "timestamp": "1774000815",
        "to_ids": true,
        "type": "domain",
        "uuid": "927ccdd2-ea86-4d41-bc7d-c447a470c5c4",
        "value": "bikeboard.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:15+00:00",
        "timestamp": "1774000815",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4625b60-679e-4e67-a7f1-6ab19d0833be",
        "value": "bikepickle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:15+00:00",
        "timestamp": "1774000815",
        "to_ids": true,
        "type": "domain",
        "uuid": "70f24121-1f09-467c-863e-ed3bb5ce8003",
        "value": "bikesdonkey.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:15+00:00",
        "timestamp": "1774000816",
        "to_ids": true,
        "type": "domain",
        "uuid": "1295d185-f00f-49dd-b6d0-44b4ccbf57b1",
        "value": "bikeszinc.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:16+00:00",
        "timestamp": "1774000816",
        "to_ids": true,
        "type": "domain",
        "uuid": "386cdaa2-5fd5-4632-8baf-f632eee58d40",
        "value": "birdsun.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:16+00:00",
        "timestamp": "1774000816",
        "to_ids": true,
        "type": "domain",
        "uuid": "776e0214-d721-400d-acbd-1cc288a908b4",
        "value": "birthdayspot.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:16+00:00",
        "timestamp": "1774000816",
        "to_ids": true,
        "type": "domain",
        "uuid": "57917ac5-3e64-484a-954b-04e9593e76c0",
        "value": "bitepoison.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:16+00:00",
        "timestamp": "1774000816",
        "to_ids": true,
        "type": "domain",
        "uuid": "642336e6-608b-43d5-a760-a73897f75d58",
        "value": "bitespark.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:16+00:00",
        "timestamp": "1774000816",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7b91520-71ad-448d-9c9b-f54b01b953f5",
        "value": "bladecream.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:16+00:00",
        "timestamp": "1774000816",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc49b3de-7839-4a36-bd70-360b20fe9a61",
        "value": "blocked.domains",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:17+00:00",
        "timestamp": "1774000817",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ff767de-a636-4d0a-a868-105179375d4c",
        "value": "bloodscarf.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:17+00:00",
        "timestamp": "1774000817",
        "to_ids": true,
        "type": "domain",
        "uuid": "f249067b-f328-42e3-8be9-7eb9b729e43a",
        "value": "blowkittens.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:17+00:00",
        "timestamp": "1774000817",
        "to_ids": true,
        "type": "domain",
        "uuid": "348f063c-6ea8-4e20-922d-6f4ff6a97fa3",
        "value": "boardvolleyball.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:17+00:00",
        "timestamp": "1774000817",
        "to_ids": true,
        "type": "domain",
        "uuid": "7240d6e9-a685-4505-a29b-bd5b40f13d3f",
        "value": "boatthought.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:17+00:00",
        "timestamp": "1774000817",
        "to_ids": true,
        "type": "domain",
        "uuid": "a95fff46-c094-4a67-8f69-567404c3c642",
        "value": "bonerailway.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:17+00:00",
        "timestamp": "1774000817",
        "to_ids": true,
        "type": "domain",
        "uuid": "0164b18e-b424-4c15-b0f0-4120bdf06f2c",
        "value": "booksalarm.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:17+00:00",
        "timestamp": "1774000818",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa4e9bef-8952-474d-a370-1b872e7879e5",
        "value": "bookstem.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:18+00:00",
        "timestamp": "1774000818",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa79230c-d5c1-4ff9-be06-38519ce1346e",
        "value": "bootplate.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:18+00:00",
        "timestamp": "1774000818",
        "to_ids": true,
        "type": "domain",
        "uuid": "73407886-af04-47ae-845a-f1b5435998f1",
        "value": "bootzebra.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:18+00:00",
        "timestamp": "1774000818",
        "to_ids": true,
        "type": "domain",
        "uuid": "b150d2d6-a61d-4fcc-b395-79e48671e835",
        "value": "bordertomatoes.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:18+00:00",
        "timestamp": "1774000818",
        "to_ids": true,
        "type": "domain",
        "uuid": "0448d3ec-d142-4d82-b559-3f4d7c6e7575",
        "value": "bottlearithmetic.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:18+00:00",
        "timestamp": "1774000818",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7b6c5b8-767d-44d8-b119-5192584eb0e6",
        "value": "bottleholiday.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:18+00:00",
        "timestamp": "1774000819",
        "to_ids": true,
        "type": "domain",
        "uuid": "81eb643b-c6b9-41ff-a17d-48b12ab92578",
        "value": "bottlewatch.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:19+00:00",
        "timestamp": "1774000819",
        "to_ids": true,
        "type": "domain",
        "uuid": "f67a351d-a2c9-4320-b7bf-1a22c9a893ae",
        "value": "boundarycaption.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:19+00:00",
        "timestamp": "1774000819",
        "to_ids": true,
        "type": "domain",
        "uuid": "896ea7df-cce7-40f8-b2c3-4b3cccd70cac",
        "value": "boundarychickens.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:19+00:00",
        "timestamp": "1774000819",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc27bcc0-e042-4922-aff6-5c7218d3e3a2",
        "value": "boundaryfly.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:19+00:00",
        "timestamp": "1774000819",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1cebac8-d126-4cfb-a983-2d7428c2466a",
        "value": "boxflesh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:19+00:00",
        "timestamp": "1774000819",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bf1300e-64d4-4517-b8c9-2395a125b445",
        "value": "boxlevel.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:19+00:00",
        "timestamp": "1774000820",
        "to_ids": true,
        "type": "domain",
        "uuid": "027c250e-c74c-45a0-9ab2-5dbc6378b534",
        "value": "boxvessel.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:20+00:00",
        "timestamp": "1774000820",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee0b5fb4-ab08-47ed-a0aa-c4e29441a031",
        "value": "boybreath.art",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:20+00:00",
        "timestamp": "1774000820",
        "to_ids": true,
        "type": "domain",
        "uuid": "45cc1c71-1d7d-4e88-ac76-4a4d434aa3bf",
        "value": "boyfoot.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:20+00:00",
        "timestamp": "1774000820",
        "to_ids": true,
        "type": "domain",
        "uuid": "67a16cbb-2c6b-4558-a69a-4344ede517e9",
        "value": "boytank.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:20+00:00",
        "timestamp": "1774000820",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b87c943-cc44-45bf-8b13-1cee0d3ae09c",
        "value": "boytheory.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:20+00:00",
        "timestamp": "1774000820",
        "to_ids": true,
        "type": "domain",
        "uuid": "d85db1d4-3905-44f2-8daf-52cbc08ace6f",
        "value": "branchbaby.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:20+00:00",
        "timestamp": "1774000821",
        "to_ids": true,
        "type": "domain",
        "uuid": "7338a1f0-6398-448f-8e52-33e6d6068cb5",
        "value": "branchmorning.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:21+00:00",
        "timestamp": "1774000821",
        "to_ids": true,
        "type": "domain",
        "uuid": "af5e1da8-5211-4815-9e33-363524502d0a",
        "value": "brasspan.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:21+00:00",
        "timestamp": "1774000821",
        "to_ids": true,
        "type": "domain",
        "uuid": "d07c33e8-c72a-437d-89ec-7c7ac8b045fa",
        "value": "brasspocket.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:21+00:00",
        "timestamp": "1774000821",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2afcbd4-8df6-4649-8f98-b21a3ffede88",
        "value": "brickcherry.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:21+00:00",
        "timestamp": "1774000821",
        "to_ids": true,
        "type": "domain",
        "uuid": "64101220-a1b4-4563-bf25-7ea879b71d91",
        "value": "brickscent.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:21+00:00",
        "timestamp": "1774000821",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0e75018-1865-477e-9baa-61498bae1e4b",
        "value": "bubbleappliance.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:21+00:00",
        "timestamp": "1774000821",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f2d98ce-d8f7-4574-b2c8-4b141bb3041e",
        "value": "bubbleinsect.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:21+00:00",
        "timestamp": "1774000822",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa152b8e-e6e9-427e-8840-d5ffb432ca0b",
        "value": "bucketthing.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:22+00:00",
        "timestamp": "1774000822",
        "to_ids": true,
        "type": "domain",
        "uuid": "efaab486-8369-429c-b536-daa2b4f11f64",
        "value": "bushesthroat.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:22+00:00",
        "timestamp": "1774000822",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8029d07-97d9-440d-975d-f7c42eb1c0ca",
        "value": "businessblow.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:22+00:00",
        "timestamp": "1774000822",
        "to_ids": true,
        "type": "domain",
        "uuid": "7933056e-62d5-419b-b2fa-6434509d9ca3",
        "value": "cabbagecircle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:22+00:00",
        "timestamp": "1774000822",
        "to_ids": true,
        "type": "domain",
        "uuid": "f857d93e-c04c-4a1c-9d0e-4ad370f168b6",
        "value": "cabbagemeasure.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:22+00:00",
        "timestamp": "1774000822",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9e573cc-c2c0-4ca5-9cc1-d21828a105db",
        "value": "cableboard.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:22+00:00",
        "timestamp": "1774000823",
        "to_ids": true,
        "type": "domain",
        "uuid": "4009c371-6e8f-4558-8548-cce718c5f7ac",
        "value": "cablecanvas.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:23+00:00",
        "timestamp": "1774000823",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d051f05-e5ef-442d-bdd6-9fbc59aa09c8",
        "value": "cableland.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:23+00:00",
        "timestamp": "1774000823",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e808707-4610-474d-87f9-3604951b13f1",
        "value": "cakefoot.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:23+00:00",
        "timestamp": "1774000823",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a52a2b6-1431-436a-8092-8838ae2bfb6a",
        "value": "calendartaste.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:23+00:00",
        "timestamp": "1774000823",
        "to_ids": true,
        "type": "domain",
        "uuid": "85034c16-d4c1-48d0-aa41-70aace30e8b6",
        "value": "campsweater.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:23+00:00",
        "timestamp": "1774000823",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e493f1b-59b0-4d7e-a437-10d151c1e61a",
        "value": "capdebt.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:23+00:00",
        "timestamp": "1774000824",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ffb6521-f9ac-4537-b84a-3720597ae9ec",
        "value": "captionbaseball.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:24+00:00",
        "timestamp": "1774000824",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6ccb5c4-e740-4c23-9cfa-902016da9ac3",
        "value": "captiontoes.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:24+00:00",
        "timestamp": "1774000824",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e623931-fa2d-47bc-90ec-ae56004144fb",
        "value": "captrousers.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:24+00:00",
        "timestamp": "1774000824",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b668ac8-1e61-43e8-85e9-6d39c80b1cdd",
        "value": "cardgrape.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:24+00:00",
        "timestamp": "1774000824",
        "to_ids": true,
        "type": "domain",
        "uuid": "64607080-0677-4807-a18b-249f85099d19",
        "value": "carsschool.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:24+00:00",
        "timestamp": "1774000824",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ffdbcbf-44f1-4e18-9cc7-fe7f711e893c",
        "value": "carttin.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:24+00:00",
        "timestamp": "1774000824",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ea186a3-1ab9-46dc-820c-871629e25ff0",
        "value": "cattleafternoon.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:24+00:00",
        "timestamp": "1774000825",
        "to_ids": true,
        "type": "domain",
        "uuid": "0348f405-25ee-4a13-a706-84d071f7133b",
        "value": "cattlegold.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:25+00:00",
        "timestamp": "1774000825",
        "to_ids": true,
        "type": "domain",
        "uuid": "a93b9c6b-8aeb-4bed-b612-755f1dc8af19",
        "value": "catumbrella.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:25+00:00",
        "timestamp": "1774000825",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8756f67-990e-49f8-bd0d-c9f0255d4bc4",
        "value": "celeryerror.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:25+00:00",
        "timestamp": "1774000825",
        "to_ids": true,
        "type": "domain",
        "uuid": "ced17238-4fc0-4295-b9a9-870877092c42",
        "value": "celerywine.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:25+00:00",
        "timestamp": "1774000825",
        "to_ids": true,
        "type": "domain",
        "uuid": "08daa64d-2afa-4433-afb5-102356898a13",
        "value": "cellardirection.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:25+00:00",
        "timestamp": "1774000825",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b2bfb79-9a8f-4708-8ceb-02e3d446b4a7",
        "value": "cemeteryfrogs.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:25+00:00",
        "timestamp": "1774000826",
        "to_ids": true,
        "type": "domain",
        "uuid": "c66508bb-96af-4a7a-9ba7-867197997785",
        "value": "centscarf.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:26+00:00",
        "timestamp": "1774000826",
        "to_ids": true,
        "type": "domain",
        "uuid": "a058b82c-65c3-42fc-9829-14f66f515005",
        "value": "chalkprose.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:26+00:00",
        "timestamp": "1774000826",
        "to_ids": true,
        "type": "domain",
        "uuid": "118f2430-f63e-4151-b824-da728d914277",
        "value": "changefarm.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:26+00:00",
        "timestamp": "1774000826",
        "to_ids": true,
        "type": "domain",
        "uuid": "7956ee29-4759-4e5d-997c-c8447a838870",
        "value": "channelfairies.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:26+00:00",
        "timestamp": "1774000826",
        "to_ids": true,
        "type": "domain",
        "uuid": "284435aa-1019-417f-9278-31da5db22432",
        "value": "cherriescoil.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:26+00:00",
        "timestamp": "1774000826",
        "to_ids": true,
        "type": "domain",
        "uuid": "4212925a-a875-433c-a873-e87e3660718f",
        "value": "cherriestruck.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:26+00:00",
        "timestamp": "1774000826",
        "to_ids": true,
        "type": "domain",
        "uuid": "a27cf531-475f-40c8-81e7-6c4a633d3a5b",
        "value": "chesschalk.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:26+00:00",
        "timestamp": "1774000827",
        "to_ids": true,
        "type": "domain",
        "uuid": "b54ee3b4-c9bb-48ca-baa0-3d77fa208a6e",
        "value": "chesstail.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:27+00:00",
        "timestamp": "1774000827",
        "to_ids": true,
        "type": "domain",
        "uuid": "60dca7ca-da75-4e53-ba2a-46e8263199e2",
        "value": "chickensmine.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:27+00:00",
        "timestamp": "1774000827",
        "to_ids": true,
        "type": "domain",
        "uuid": "21ecfa2f-be22-4e16-bcb8-8d6ba8d00a0b",
        "value": "chickensview.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:27+00:00",
        "timestamp": "1774000827",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d942137-4031-49f5-b842-e59856b0d250",
        "value": "childrenboat.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:27+00:00",
        "timestamp": "1774000827",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e0d8432-556d-4fa7-8112-f842cd731657",
        "value": "childrenwash.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:27+00:00",
        "timestamp": "1774000827",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba886a50-ffb0-418e-877b-321f73ff361a",
        "value": "chinexpert.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:27+00:00",
        "timestamp": "1774000828",
        "to_ids": true,
        "type": "domain",
        "uuid": "23194451-7b74-4b6b-a2db-8ef10789025a",
        "value": "churchpail.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:28+00:00",
        "timestamp": "1774000828",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c4a56d0-6234-4a4e-a360-fbe6ccf6bf1f",
        "value": "churchtalk.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:28+00:00",
        "timestamp": "1774000828",
        "to_ids": true,
        "type": "domain",
        "uuid": "a967a910-8d08-4a1a-8cf0-cb0ccc78f32a",
        "value": "circleground.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:28+00:00",
        "timestamp": "1774000828",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e8d8e4d-19e4-4d41-8b7d-9188602e8cbe",
        "value": "circlewar.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:28+00:00",
        "timestamp": "1774000828",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba24251a-ef2b-48ce-971b-25e67a9f9787",
        "value": "clamsalt.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:28+00:00",
        "timestamp": "1774000828",
        "to_ids": true,
        "type": "domain",
        "uuid": "40edc129-cda3-43e7-aef9-59ecf3774afe",
        "value": "clothcrib.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:28+00:00",
        "timestamp": "1774000829",
        "to_ids": true,
        "type": "domain",
        "uuid": "487db247-97f6-46f7-8a2b-1735fabfc810",
        "value": "clothcurrent.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:29+00:00",
        "timestamp": "1774000829",
        "to_ids": true,
        "type": "domain",
        "uuid": "70712e8a-a664-40a5-b0f5-ec0ecd32ef0f",
        "value": "clothyak.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:29+00:00",
        "timestamp": "1774000829",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f110687-13ad-459c-b6f0-658fa7fd794e",
        "value": "clovervegetable.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:29+00:00",
        "timestamp": "1774000829",
        "to_ids": true,
        "type": "domain",
        "uuid": "57b7cace-3832-4ba8-9b21-fcdcf2aff2c8",
        "value": "clubbabies.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:29+00:00",
        "timestamp": "1774000829",
        "to_ids": true,
        "type": "domain",
        "uuid": "51cd10e5-180d-4188-9a59-793e660921fc",
        "value": "clubpoison.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:29+00:00",
        "timestamp": "1774000829",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d237a4e-84ee-4f61-9daa-461ea23dc70a",
        "value": "coachhoney.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:29+00:00",
        "timestamp": "1774000829",
        "to_ids": true,
        "type": "domain",
        "uuid": "4068f8de-fff2-43da-88fa-c6ae37924aa9",
        "value": "coalcreator.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:29+00:00",
        "timestamp": "1774000830",
        "to_ids": true,
        "type": "domain",
        "uuid": "73b13687-15d2-4ebd-b063-cb8ce7135cab",
        "value": "coalcrime.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:30+00:00",
        "timestamp": "1774000830",
        "to_ids": true,
        "type": "domain",
        "uuid": "01842275-427c-470b-954b-1d2289477b1c",
        "value": "coaltown.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:30+00:00",
        "timestamp": "1774000830",
        "to_ids": true,
        "type": "domain",
        "uuid": "b069b5fc-f695-4c11-9537-ffcf9735c924",
        "value": "coastcat.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:30+00:00",
        "timestamp": "1774000830",
        "to_ids": true,
        "type": "domain",
        "uuid": "986e4ceb-4337-40e7-be2d-25a2bdc4a8ac",
        "value": "coasttreatment.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:30+00:00",
        "timestamp": "1774000830",
        "to_ids": true,
        "type": "domain",
        "uuid": "023c73af-d475-46d2-8e36-fcc3fd23aa69",
        "value": "coatberry.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:30+00:00",
        "timestamp": "1774000830",
        "to_ids": true,
        "type": "domain",
        "uuid": "2405b853-8b6c-4afb-a298-0ecd51834a5c",
        "value": "coilcoat.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:30+00:00",
        "timestamp": "1774000831",
        "to_ids": true,
        "type": "domain",
        "uuid": "130df893-a033-4fa3-afa6-6d9cc30c232e",
        "value": "coilconnection.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:31+00:00",
        "timestamp": "1774000831",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb59755e-88dc-41d9-890b-e8bac44a8aae",
        "value": "collarhome.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:31+00:00",
        "timestamp": "1774000831",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a245ad2-a896-46c4-b253-321781bdf7c3",
        "value": "collarmom.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:31+00:00",
        "timestamp": "1774000831",
        "to_ids": true,
        "type": "domain",
        "uuid": "56d74504-7b94-4a4b-aeb9-952ad683c005",
        "value": "collarvase.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:31+00:00",
        "timestamp": "1774000831",
        "to_ids": true,
        "type": "domain",
        "uuid": "38b4ca0f-45c1-4909-a911-3a1f8215b009",
        "value": "colorbalance.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:31+00:00",
        "timestamp": "1774000831",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e2df98f-d6a5-4325-a4da-1b22163fcaf2",
        "value": "colorrabbit.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:31+00:00",
        "timestamp": "1774000831",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f838e75-e41b-4fce-81bc-b6335036fc62",
        "value": "colorsoda.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:32+00:00",
        "timestamp": "1774000832",
        "to_ids": true,
        "type": "domain",
        "uuid": "9906ce23-8a30-4ca7-8c25-00c04e9fae94",
        "value": "colorunit.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:32+00:00",
        "timestamp": "1774000832",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a6d0025-fd87-48d2-a507-23fcb617f94e",
        "value": "committeecopper.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:32+00:00",
        "timestamp": "1774000832",
        "to_ids": true,
        "type": "domain",
        "uuid": "1608e6f9-cae8-4b28-bee0-fe28e99a53f9",
        "value": "committeeweather.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:32+00:00",
        "timestamp": "1774000832",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e70a19c-aa67-44e2-9126-c6b1e6da054d",
        "value": "comparisonsnails.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:32+00:00",
        "timestamp": "1774000832",
        "to_ids": true,
        "type": "domain",
        "uuid": "71d29425-3abb-4b92-969b-879cac6ba2d7",
        "value": "conditiongrade.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:32+00:00",
        "timestamp": "1774000832",
        "to_ids": true,
        "type": "domain",
        "uuid": "e84a6a5f-e8bd-4570-a83a-fbe63cad4033",
        "value": "connect.fogparcel.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:32+00:00",
        "timestamp": "1774000833",
        "to_ids": true,
        "type": "domain",
        "uuid": "a666b66c-e2a0-462e-a791-2cd77ac48667",
        "value": "connect.fowladdition.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:33+00:00",
        "timestamp": "1774000833",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8e9532c-f88a-45ee-8c8e-64e9e3f91d19",
        "value": "connect.halllunch.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:33+00:00",
        "timestamp": "1774000833",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a331ad3-7552-4992-a0f4-6c0c82c62a17",
        "value": "connect.holecompany.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:33+00:00",
        "timestamp": "1774000833",
        "to_ids": true,
        "type": "domain",
        "uuid": "520f7bac-bac9-49e4-8165-f785d38c696e",
        "value": "connect.purposethings.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:33+00:00",
        "timestamp": "1774000833",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ccc6dd2-2d9e-4881-8dcb-4d741759cb6b",
        "value": "connectionwood.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:33+00:00",
        "timestamp": "1774000833",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8d4f4e5-ebe3-4355-a7f1-407df68b97d2",
        "value": "controlprice.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:33+00:00",
        "timestamp": "1774000834",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5ac5bec-c660-4094-9a0d-ed9de9f3d397",
        "value": "controlprice.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:34+00:00",
        "timestamp": "1774000834",
        "to_ids": true,
        "type": "domain",
        "uuid": "62b13327-ee52-4909-87b9-6e6a2f1259b6",
        "value": "cookdiscussion.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:34+00:00",
        "timestamp": "1774000834",
        "to_ids": true,
        "type": "domain",
        "uuid": "32c40600-57c4-4e1c-b9bf-d824ce4a9b41",
        "value": "cookorange.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:34+00:00",
        "timestamp": "1774000834",
        "to_ids": true,
        "type": "domain",
        "uuid": "693adb54-8759-41e4-a07d-79972b0d1432",
        "value": "copperpeace.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:34+00:00",
        "timestamp": "1774000834",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec7e6dc7-f4ad-44e4-8437-eca171aab373",
        "value": "copperspring.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:34+00:00",
        "timestamp": "1774000834",
        "to_ids": true,
        "type": "domain",
        "uuid": "033e14d8-d024-44b9-b0d0-5ee97d3b3881",
        "value": "coppersummer.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:34+00:00",
        "timestamp": "1774000834",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee52a495-ea81-4afa-b5d7-f9600d8c9635",
        "value": "corninsect.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:35+00:00",
        "timestamp": "1774000835",
        "to_ids": true,
        "type": "domain",
        "uuid": "651cd929-90a5-4dc3-880f-141cba8860e1",
        "value": "countryview.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:35+00:00",
        "timestamp": "1774000835",
        "to_ids": true,
        "type": "domain",
        "uuid": "72d6c1a2-0e80-48e1-a314-8950459c0b4f",
        "value": "countrywindow.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:35+00:00",
        "timestamp": "1774000835",
        "to_ids": true,
        "type": "domain",
        "uuid": "864e0432-195d-4b69-9b58-8fefcf25cb44",
        "value": "coverhands.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:35+00:00",
        "timestamp": "1774000835",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c389265-e8df-45bc-b674-8577ec537e09",
        "value": "covermiddle.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:35+00:00",
        "timestamp": "1774000835",
        "to_ids": true,
        "type": "domain",
        "uuid": "11934ba0-5e03-4b23-96ef-36490866b51f",
        "value": "cowsfoot.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:35+00:00",
        "timestamp": "1774000836",
        "to_ids": true,
        "type": "domain",
        "uuid": "76798693-8eb3-4d11-a35c-580ac8151e5f",
        "value": "creamdog.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:36+00:00",
        "timestamp": "1774000836",
        "to_ids": true,
        "type": "domain",
        "uuid": "e00669bf-3f65-4436-b7c0-b7ac9581785e",
        "value": "creamfurniture.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:36+00:00",
        "timestamp": "1774000836",
        "to_ids": true,
        "type": "domain",
        "uuid": "96407c48-c228-40b2-891f-fac474835a68",
        "value": "creamtramp.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:36+00:00",
        "timestamp": "1774000836",
        "to_ids": true,
        "type": "domain",
        "uuid": "14fa5301-b7e7-4974-89f9-c6a8f389fd7d",
        "value": "creatorcreator.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:36+00:00",
        "timestamp": "1774000836",
        "to_ids": true,
        "type": "domain",
        "uuid": "318defb4-3640-42b3-9b21-44bf6b1620af",
        "value": "creatorthread.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:36+00:00",
        "timestamp": "1774000836",
        "to_ids": true,
        "type": "domain",
        "uuid": "96fbf5d3-528c-4755-abfc-4a8eddf499c8",
        "value": "creatureicicle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:36+00:00",
        "timestamp": "1774000836",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d6d77f7-89ee-4c2f-b02a-ebc84a2e3252",
        "value": "creditchickens.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:36+00:00",
        "timestamp": "1774000837",
        "to_ids": true,
        "type": "domain",
        "uuid": "492a74cc-9445-4e4e-9afb-7ec14d5f5caa",
        "value": "crediteducation.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:37+00:00",
        "timestamp": "1774000837",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ca24962-f13d-4455-9b73-0d316fbbdc48",
        "value": "credittin.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:37+00:00",
        "timestamp": "1774000837",
        "to_ids": true,
        "type": "domain",
        "uuid": "f20e126d-758f-491f-b803-baaf78f40224",
        "value": "cribexistence.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:37+00:00",
        "timestamp": "1774000837",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7204e9f-bab5-43a8-81da-8e89034da2cb",
        "value": "crimestreet.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:37+00:00",
        "timestamp": "1774000837",
        "to_ids": true,
        "type": "domain",
        "uuid": "79979db8-d050-4edb-9960-4517e0eb2ef3",
        "value": "crowcheese.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:37+00:00",
        "timestamp": "1774000837",
        "to_ids": true,
        "type": "domain",
        "uuid": "60b59a99-7cf9-4f2c-a1bf-e12c5fb2c30f",
        "value": "crowdflight.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:37+00:00",
        "timestamp": "1774000838",
        "to_ids": true,
        "type": "domain",
        "uuid": "50462974-fea4-437a-af74-d0d4f61e6d17",
        "value": "crowdsquare.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:38+00:00",
        "timestamp": "1774000838",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8ccc363-ad47-424b-a6c1-9bf927286ad5",
        "value": "crowidea.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:38+00:00",
        "timestamp": "1774000838",
        "to_ids": true,
        "type": "domain",
        "uuid": "a45dd108-9e76-496e-86e8-b2055fff9bd3",
        "value": "crowmotion.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:38+00:00",
        "timestamp": "1774000838",
        "to_ids": true,
        "type": "domain",
        "uuid": "58bb2798-2946-4769-bcef-e7458faf0dcd",
        "value": "cubfriend.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:38+00:00",
        "timestamp": "1774000838",
        "to_ids": true,
        "type": "domain",
        "uuid": "248a782f-881f-4d0a-87a2-40acdcf7a9f6",
        "value": "cubmilk.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:38+00:00",
        "timestamp": "1774000838",
        "to_ids": true,
        "type": "domain",
        "uuid": "814b42f8-7cd6-4b24-a0ad-5c75a96af356",
        "value": "currentschool.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:39+00:00",
        "timestamp": "1774000839",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c8041e5-25d1-47a3-b98e-ef4aface0eb2",
        "value": "curvebite.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:39+00:00",
        "timestamp": "1774000839",
        "to_ids": true,
        "type": "domain",
        "uuid": "23662595-f3c1-4164-a166-f7137c784868",
        "value": "dadforce.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:39+00:00",
        "timestamp": "1774000839",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a1efa00-a65a-43d7-92d1-39fd6cdd0858",
        "value": "dadspace.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:39+00:00",
        "timestamp": "1774000839",
        "to_ids": true,
        "type": "domain",
        "uuid": "29840d2b-ad00-461d-b146-a10a7f95d9ec",
        "value": "dayview.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:39+00:00",
        "timestamp": "1774000839",
        "to_ids": true,
        "type": "domain",
        "uuid": "dad76141-f503-4bb5-b6c1-51639e43d439",
        "value": "deathrock.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:39+00:00",
        "timestamp": "1774000839",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4a00e1e-41ee-4b7b-a8bb-f0fa1be402ef",
        "value": "deathshop.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:39+00:00",
        "timestamp": "1774000840",
        "to_ids": true,
        "type": "domain",
        "uuid": "c67faa60-ea55-4ff6-ac64-933d8ba77ef0",
        "value": "debtmist.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:40+00:00",
        "timestamp": "1774000840",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d3aa93b-c762-451c-9ea7-b834122e2462",
        "value": "debtoatmeal.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:40+00:00",
        "timestamp": "1774000840",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7f7d366-e944-4d9a-b868-53f8d9622f1a",
        "value": "decisionreaction.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:40+00:00",
        "timestamp": "1774000840",
        "to_ids": true,
        "type": "domain",
        "uuid": "1016b71f-c5fd-4dce-adf4-8857de10096f",
        "value": "degreetrucks.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:40+00:00",
        "timestamp": "1774000840",
        "to_ids": true,
        "type": "domain",
        "uuid": "9131d146-c086-484d-840c-027d2527edcf",
        "value": "designquince.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:40+00:00",
        "timestamp": "1774000840",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ba1a4f9-252b-4a66-a963-1920d3f4e0d4",
        "value": "desireplastic.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:40+00:00",
        "timestamp": "1774000841",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ee0e304-a09b-4132-9984-1cb28e5b5dcb",
        "value": "desktongue.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:41+00:00",
        "timestamp": "1774000841",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bdcdff5-cfba-4878-be05-bf6b921fc75e",
        "value": "dimemilk.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:41+00:00",
        "timestamp": "1774000841",
        "to_ids": true,
        "type": "domain",
        "uuid": "df59428f-ea85-44eb-86a3-bc73fd659441",
        "value": "dinosaurspage.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:41+00:00",
        "timestamp": "1774000841",
        "to_ids": true,
        "type": "domain",
        "uuid": "62da0b82-a584-4161-bc77-219e3e226405",
        "value": "discoverytrip.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:41+00:00",
        "timestamp": "1774000841",
        "to_ids": true,
        "type": "domain",
        "uuid": "9093684f-5613-4ecf-89a5-72e858eb6ddc",
        "value": "discoverytrucks.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:41+00:00",
        "timestamp": "1774000841",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0412f20-f193-43c2-8e6a-07e645561eb6",
        "value": "discussionocean.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:41+00:00",
        "timestamp": "1774000841",
        "to_ids": true,
        "type": "domain",
        "uuid": "468ab468-7663-4a70-83cf-b85e295a17e8",
        "value": "discussionpassenger.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:42+00:00",
        "timestamp": "1774000842",
        "to_ids": true,
        "type": "domain",
        "uuid": "655b03de-442d-49b1-8615-f5e20371d698",
        "value": "distancebedroom.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:42+00:00",
        "timestamp": "1774000842",
        "to_ids": true,
        "type": "domain",
        "uuid": "52c196be-b5df-4dc3-97d9-1cf578348154",
        "value": "distributionguitar.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:42+00:00",
        "timestamp": "1774000842",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b7365a6-19a6-4f5f-8074-3b822dcc6d7d",
        "value": "dogmilk.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:42+00:00",
        "timestamp": "1774000842",
        "to_ids": true,
        "type": "domain",
        "uuid": "b12f3faa-bffa-4559-ba0a-42b707dcc013",
        "value": "dogpump.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:42+00:00",
        "timestamp": "1774000842",
        "to_ids": true,
        "type": "domain",
        "uuid": "70fcb515-e11e-40a9-b768-5c489ab0b376",
        "value": "dogsbasket.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:42+00:00",
        "timestamp": "1774000842",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7e49155-b0e6-45bd-a887-aee7465814a2",
        "value": "dogsfold.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:42+00:00",
        "timestamp": "1774000843",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f2207e9-8777-4718-8ec6-d76383363882",
        "value": "dogswool.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:43+00:00",
        "timestamp": "1774000843",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb370067-5d9e-4f22-9b16-9690c33ee132",
        "value": "dolldebt.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:43+00:00",
        "timestamp": "1774000843",
        "to_ids": true,
        "type": "domain",
        "uuid": "23558d8a-3c22-4f24-8568-8a9ebcb4798a",
        "value": "dollsgovernment.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:43+00:00",
        "timestamp": "1774000843",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d9b96f5-b444-4311-9fda-241081c2325d",
        "value": "donkeycollar.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:43+00:00",
        "timestamp": "1774000843",
        "to_ids": true,
        "type": "domain",
        "uuid": "86a4ab94-9900-4dd0-bb9d-611d36c9c6b6",
        "value": "doordime.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:43+00:00",
        "timestamp": "1774000843",
        "to_ids": true,
        "type": "domain",
        "uuid": "84d5ad3c-bdbb-42c7-8682-87306917e6d4",
        "value": "downloadsilo.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:43+00:00",
        "timestamp": "1774000844",
        "to_ids": true,
        "type": "domain",
        "uuid": "4795a99a-1f55-45af-abfa-b94f85e4287f",
        "value": "downtownbait.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:44+00:00",
        "timestamp": "1774000844",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc4a5a52-72be-47fa-9191-a2a5bdc3f3b8",
        "value": "dressberry.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:44+00:00",
        "timestamp": "1774000844",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3cda5ba-f679-4a6a-9d16-d41a58d22938",
        "value": "dresstent.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:44+00:00",
        "timestamp": "1774000844",
        "to_ids": true,
        "type": "domain",
        "uuid": "74c36ade-a1e6-49d6-b26f-7c2a0651a656",
        "value": "dressthroat.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:44+00:00",
        "timestamp": "1774000844",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab22edef-bb1f-432b-8a7f-67385cf2d8f3",
        "value": "drophorse.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:44+00:00",
        "timestamp": "1774000844",
        "to_ids": true,
        "type": "domain",
        "uuid": "f87e94e3-3853-4f24-a6be-7298e927f3e6",
        "value": "dropjeans.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:44+00:00",
        "timestamp": "1774000844",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3a3114a-ecdb-441e-8200-8fd85264ee8e",
        "value": "duckstown.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:44+00:00",
        "timestamp": "1774000845",
        "to_ids": true,
        "type": "domain",
        "uuid": "8663f81d-0433-4bfd-b096-e74901d9970e",
        "value": "dustfurniture.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:45+00:00",
        "timestamp": "1774000845",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc1a4da2-58bd-4a45-8955-968475128498",
        "value": "dustprotest.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:45+00:00",
        "timestamp": "1774000845",
        "to_ids": true,
        "type": "domain",
        "uuid": "625da4b4-901b-4d19-b4ce-e5da2b915bd6",
        "value": "earthquakebrass.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:45+00:00",
        "timestamp": "1774000845",
        "to_ids": true,
        "type": "domain",
        "uuid": "44f27a82-101a-4ec9-a53a-b4bfcd74d7f1",
        "value": "earthselection.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:45+00:00",
        "timestamp": "1774000845",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c9b213a-e711-4486-bd81-6f5a033f8b9e",
        "value": "edgeplayground.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:45+00:00",
        "timestamp": "1774000845",
        "to_ids": true,
        "type": "domain",
        "uuid": "2249ed5b-482e-4c04-a485-3f6f8898516c",
        "value": "edgepocket.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:45+00:00",
        "timestamp": "1774000846",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c8cb2f6-3b13-4e0a-bc57-4f904c6c19b3",
        "value": "effectdinosaurs.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:46+00:00",
        "timestamp": "1774000846",
        "to_ids": true,
        "type": "domain",
        "uuid": "e41eed8a-373d-4f01-896a-ea8bcc86f5be",
        "value": "effectshape.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:46+00:00",
        "timestamp": "1774000846",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e40876d-499d-4555-9208-632a48b4bcce",
        "value": "eggnogincome.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:46+00:00",
        "timestamp": "1774000846",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3d08894-e0cd-44ba-ad21-7e1f23459ee7",
        "value": "elbowbat.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:46+00:00",
        "timestamp": "1774000846",
        "to_ids": true,
        "type": "domain",
        "uuid": "df119140-f6ee-45c6-b35d-87c70b1da46f",
        "value": "eventquill.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:46+00:00",
        "timestamp": "1774000846",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb33873f-5328-470c-98bb-a4ba37a887c2",
        "value": "exchangeclub.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:46+00:00",
        "timestamp": "1774000846",
        "to_ids": true,
        "type": "domain",
        "uuid": "62f9bce4-3215-411f-abfa-765b9b0dd1bd",
        "value": "exchangeplants.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:47+00:00",
        "timestamp": "1774000847",
        "to_ids": true,
        "type": "domain",
        "uuid": "16c6b52d-39a6-497a-bd14-c134326c77e7",
        "value": "existencediscussion.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:47+00:00",
        "timestamp": "1774000847",
        "to_ids": true,
        "type": "domain",
        "uuid": "73147235-7047-4d0c-869b-bcc055d6f8c0",
        "value": "expansionsalt.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:47+00:00",
        "timestamp": "1774000847",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb5c0d6b-4a40-42bb-8740-c739599bcf74",
        "value": "experiencerequest.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:47+00:00",
        "timestamp": "1774000847",
        "to_ids": true,
        "type": "domain",
        "uuid": "7edf615a-2deb-4941-94e5-52a329fb7c3f",
        "value": "expertbike.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:47+00:00",
        "timestamp": "1774000847",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0dd8ab7-e8a0-45b6-8e49-72e4fd66f698",
        "value": "expertpowder.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:47+00:00",
        "timestamp": "1774000847",
        "to_ids": true,
        "type": "domain",
        "uuid": "d13ed92a-1d37-403d-85c6-72d9cf1e5b40",
        "value": "eyeagreement.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:47+00:00",
        "timestamp": "1774000848",
        "to_ids": true,
        "type": "domain",
        "uuid": "da0800a9-5cc2-42ef-bf00-68211000f718",
        "value": "eyerule.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:48+00:00",
        "timestamp": "1774000848",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0e9cbcc-4027-479e-96f4-df38cb5327eb",
        "value": "fairiespoint.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:48+00:00",
        "timestamp": "1774000848",
        "to_ids": true,
        "type": "domain",
        "uuid": "d42bd53d-150e-4ebd-88e8-ec6e4c59bd83",
        "value": "fallbeginner.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:48+00:00",
        "timestamp": "1774000848",
        "to_ids": true,
        "type": "domain",
        "uuid": "51a55ab4-50f8-4bfa-846d-8b18337c08c5",
        "value": "fallcar.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:48+00:00",
        "timestamp": "1774000848",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9835131-1b04-4146-a495-2e27ae9e3606",
        "value": "fangbear.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:48+00:00",
        "timestamp": "1774000848",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9d30934-86c4-4874-adc4-ee5f6a5eb067",
        "value": "fangbelieve.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:48+00:00",
        "timestamp": "1774000849",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0849137-134c-434d-89f9-10ac5ba5378b",
        "value": "fangdesire.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:49+00:00",
        "timestamp": "1774000849",
        "to_ids": true,
        "type": "domain",
        "uuid": "86afe1c7-8a7d-4650-b378-18d289acf3a4",
        "value": "fangstitch.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:49+00:00",
        "timestamp": "1774000849",
        "to_ids": true,
        "type": "domain",
        "uuid": "d13148d4-3c1f-4af5-b9de-f8789e42ebb1",
        "value": "fangvan.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:49+00:00",
        "timestamp": "1774000849",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4847a5e-6f56-4bbb-86e0-c55552033530",
        "value": "farmnut.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:49+00:00",
        "timestamp": "1774000849",
        "to_ids": true,
        "type": "domain",
        "uuid": "53e75d13-dcaf-437f-8e6f-76612934a7a1",
        "value": "farmpan.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:49+00:00",
        "timestamp": "1774000849",
        "to_ids": true,
        "type": "domain",
        "uuid": "1651fc54-c862-4323-a7d9-fc219fb328bc",
        "value": "fd.harmonycontrol.club",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:49+00:00",
        "timestamp": "1774000849",
        "to_ids": true,
        "type": "domain",
        "uuid": "acfc32ab-a68a-40d6-8f08-a16fc05d184e",
        "value": "fieldfly.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:50+00:00",
        "timestamp": "1774000850",
        "to_ids": true,
        "type": "domain",
        "uuid": "0de50d49-9293-419f-916d-6da8593f9cf2",
        "value": "file-download.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:50+00:00",
        "timestamp": "1774000850",
        "to_ids": true,
        "type": "domain",
        "uuid": "54b22243-f8a7-4cde-a8d9-396e1b208270",
        "value": "filedownload.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:50+00:00",
        "timestamp": "1774000850",
        "to_ids": true,
        "type": "domain",
        "uuid": "741a3199-3892-4cd0-ba53-ac7d327b46cc",
        "value": "filescenter.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:50+00:00",
        "timestamp": "1774000850",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e21924b-dc8b-461b-819f-81f25785bce1",
        "value": "filesilo.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:50+00:00",
        "timestamp": "1774000850",
        "to_ids": true,
        "type": "domain",
        "uuid": "242f6dd1-12d0-4681-9ede-cedc30c93ade",
        "value": "filesilocenter.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:50+00:00",
        "timestamp": "1774000850",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdbc8971-155d-400f-9448-79dc71f92cb2",
        "value": "filesilohub.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:50+00:00",
        "timestamp": "1774000851",
        "to_ids": true,
        "type": "domain",
        "uuid": "f83ebe50-67e5-4e2a-8bc8-df6636db6257",
        "value": "fingerbasketball.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:51+00:00",
        "timestamp": "1774000851",
        "to_ids": true,
        "type": "domain",
        "uuid": "8708bcd6-1028-42e5-979d-9b428392c0fb",
        "value": "fingercough.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:51+00:00",
        "timestamp": "1774000851",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd5409d3-0204-463c-b334-08e9b28676c0",
        "value": "fingercrayon.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:51+00:00",
        "timestamp": "1774000851",
        "to_ids": true,
        "type": "domain",
        "uuid": "10d19f1f-6054-44e7-94b4-951bfd12d64d",
        "value": "fingergrape.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:51+00:00",
        "timestamp": "1774000851",
        "to_ids": true,
        "type": "domain",
        "uuid": "40eff5d6-bf90-4e09-bf6a-6689c1263ecc",
        "value": "firefang.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:51+00:00",
        "timestamp": "1774000851",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ef0a602-a726-46a6-894a-018c9954bf13",
        "value": "flameeggnog.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:51+00:00",
        "timestamp": "1774000852",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc495fa3-a34d-4084-b46a-7564bd68cacd",
        "value": "flavorwood.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:52+00:00",
        "timestamp": "1774000852",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebc8a24f-3819-48c7-9c24-558cbb8dcc84",
        "value": "fleshfrog.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:52+00:00",
        "timestamp": "1774000852",
        "to_ids": true,
        "type": "domain",
        "uuid": "1133e6b6-0d4a-4d55-97a8-c85545fff2ac",
        "value": "fleshplants.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:52+00:00",
        "timestamp": "1774000852",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8fe3596-219e-4933-8a10-7f089ee7be57",
        "value": "fleshproduce.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:52+00:00",
        "timestamp": "1774000852",
        "to_ids": true,
        "type": "domain",
        "uuid": "064655e3-8ac1-45bb-8c09-3ad0eb97142f",
        "value": "fleshwrist.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:52+00:00",
        "timestamp": "1774000852",
        "to_ids": true,
        "type": "domain",
        "uuid": "fde1eea6-aacf-4009-8291-85a9ed9d9cc1",
        "value": "flightpowder.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:52+00:00",
        "timestamp": "1774000853",
        "to_ids": true,
        "type": "domain",
        "uuid": "30216823-be57-4e4f-a7a0-100aa9fa2c68",
        "value": "flocktitle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:53+00:00",
        "timestamp": "1774000853",
        "to_ids": true,
        "type": "domain",
        "uuid": "57be028c-3b79-41c3-8e58-967a3c832e37",
        "value": "flowerscopper.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:53+00:00",
        "timestamp": "1774000853",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb9cb01c-0e3a-41a8-95a6-7a8eb48f2cb3",
        "value": "flybreath.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:53+00:00",
        "timestamp": "1774000853",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9b6bc84-2c17-4e03-80a2-943be96b3427",
        "value": "flystamp.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:53+00:00",
        "timestamp": "1774000853",
        "to_ids": true,
        "type": "domain",
        "uuid": "58c3be4e-f082-4e34-a6bd-0df81d09abe2",
        "value": "fogbed.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:53+00:00",
        "timestamp": "1774000853",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb4a1532-5d66-4a0d-956c-a308a0bb50b1",
        "value": "fogparcel.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:53+00:00",
        "timestamp": "1774000854",
        "to_ids": true,
        "type": "domain",
        "uuid": "53ccc348-5282-4eea-b50e-2f5793d9b898",
        "value": "foldgun.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:54+00:00",
        "timestamp": "1774000854",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f58f7e2-ee20-416f-875a-d6a54f7ad140",
        "value": "foodhook.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:54+00:00",
        "timestamp": "1774000854",
        "to_ids": true,
        "type": "domain",
        "uuid": "a06046a1-9ed0-4099-aa8b-19e11acc628d",
        "value": "foodrailway.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:54+00:00",
        "timestamp": "1774000854",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d18a41c-c713-470c-a21c-aeadd2b70cd7",
        "value": "foottendency.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:54+00:00",
        "timestamp": "1774000854",
        "to_ids": true,
        "type": "domain",
        "uuid": "1870ea13-6a6f-48c1-b8c9-f0b4e3b24e4b",
        "value": "forcepear.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:54+00:00",
        "timestamp": "1774000854",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b570943-f31a-4a5c-a09c-a3cb423da36f",
        "value": "forkcountry.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:54+00:00",
        "timestamp": "1774000854",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b1388fb-962d-470d-a6e2-4db572d944bf",
        "value": "forkmice.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:54+00:00",
        "timestamp": "1774000855",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d29771c-b955-4a2a-ae15-e5499cb3ff68",
        "value": "forkrifle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:55+00:00",
        "timestamp": "1774000855",
        "to_ids": true,
        "type": "domain",
        "uuid": "baf3ee3d-27f0-41a8-80b9-edfa73d91067",
        "value": "fowladdition.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:55+00:00",
        "timestamp": "1774000855",
        "to_ids": true,
        "type": "domain",
        "uuid": "2380ad9f-3f99-49a4-bb1e-96865ae45b9d",
        "value": "fowlbridge.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:55+00:00",
        "timestamp": "1774000855",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0d0e9c7-dff6-4032-8bb7-1794fc894b24",
        "value": "frameclover.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:55+00:00",
        "timestamp": "1774000855",
        "to_ids": true,
        "type": "domain",
        "uuid": "93bb7a35-24c3-408a-9fb1-2f1caa853d52",
        "value": "friendsafterthought.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:55+00:00",
        "timestamp": "1774000855",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4707750-6f49-499c-92a1-f07419235278",
        "value": "friendterritory.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:55+00:00",
        "timestamp": "1774000856",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f2312f7-4988-4bf9-880d-a42c8331b96e",
        "value": "frogsea.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:56+00:00",
        "timestamp": "1774000856",
        "to_ids": true,
        "type": "domain",
        "uuid": "7640a8d3-fa83-4253-951b-20f25ccb0641",
        "value": "frogspie.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:56+00:00",
        "timestamp": "1774000856",
        "to_ids": true,
        "type": "domain",
        "uuid": "e51793e1-2915-47c7-8787-3a9ba9fb9581",
        "value": "fuelpower.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:56+00:00",
        "timestamp": "1774000856",
        "to_ids": true,
        "type": "domain",
        "uuid": "98df69ea-975f-4843-93d1-3be18231f83b",
        "value": "fuelshock.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:56+00:00",
        "timestamp": "1774000856",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e6cae0a-28d1-403e-b9c2-091f48e18e59",
        "value": "fueltransport.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:56+00:00",
        "timestamp": "1774000856",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a1aaede-eacd-45a4-8840-030e2a4555ee",
        "value": "geeseairport.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:56+00:00",
        "timestamp": "1774000857",
        "to_ids": true,
        "type": "domain",
        "uuid": "b67f97fa-fa8f-49b1-8163-a2fcb7843b3f",
        "value": "geesepurpose.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:57+00:00",
        "timestamp": "1774000857",
        "to_ids": true,
        "type": "domain",
        "uuid": "976b7445-257f-4177-b06f-73c9f8d2cde4",
        "value": "giantsdogs.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:57+00:00",
        "timestamp": "1774000857",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa9f47f5-059b-489d-81ad-614ee3e3019c",
        "value": "giantslegs.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:57+00:00",
        "timestamp": "1774000857",
        "to_ids": true,
        "type": "domain",
        "uuid": "a44d7e20-8016-4999-b8c8-e273f6fc3b74",
        "value": "giraffecrowd.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:57+00:00",
        "timestamp": "1774000857",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9d49f2d-f4a9-4268-a822-58bda872f695",
        "value": "giraffesheep.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:57+00:00",
        "timestamp": "1774000857",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff4d8c30-ee38-436e-8ee1-5e808f5bbd81",
        "value": "giraffetoothpaste.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:57+00:00",
        "timestamp": "1774000857",
        "to_ids": true,
        "type": "domain",
        "uuid": "363cc5ca-e07f-45e7-b40d-42b18e5efdbe",
        "value": "glasscellar.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:58+00:00",
        "timestamp": "1774000858",
        "to_ids": true,
        "type": "domain",
        "uuid": "771ac109-e9c0-4044-aba4-3aff0f1d0053",
        "value": "glassmove.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:58+00:00",
        "timestamp": "1774000858",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2cf6acf-cc16-4060-bced-d904638db742",
        "value": "glovecar.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:58+00:00",
        "timestamp": "1774000858",
        "to_ids": true,
        "type": "domain",
        "uuid": "5db183c6-e7ca-4af9-ac17-34198d3fce91",
        "value": "glovedevelopment.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:58+00:00",
        "timestamp": "1774000858",
        "to_ids": true,
        "type": "domain",
        "uuid": "71c2beee-677a-461c-ad86-e8442ce4c6b9",
        "value": "gloveflock.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:58+00:00",
        "timestamp": "1774000858",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a9a27df-b8a2-451e-907c-267d8ade5a37",
        "value": "gloveshame.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:58+00:00",
        "timestamp": "1774000858",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ad7e446-edfc-4e59-a54e-bbd4647c9993",
        "value": "glovesquirrel.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:58+00:00",
        "timestamp": "1774000859",
        "to_ids": true,
        "type": "domain",
        "uuid": "b26d8af6-d714-4e72-82e3-c4471e882394",
        "value": "goldsteel.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:59+00:00",
        "timestamp": "1774000859",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5cb5505-e43c-41bb-b705-d5715c45104f",
        "value": "governorcup.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:59+00:00",
        "timestamp": "1774000859",
        "to_ids": true,
        "type": "domain",
        "uuid": "f10d31d5-e052-497f-bdab-490040945e6b",
        "value": "governorguitar.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:59+00:00",
        "timestamp": "1774000859",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a73145e-a28d-40f1-86a0-a7df1d8fc9b5",
        "value": "gradesleep.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:59+00:00",
        "timestamp": "1774000859",
        "to_ids": true,
        "type": "domain",
        "uuid": "a133d97a-aa79-495c-b0b7-87319ecdc437",
        "value": "grainverse.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:59+00:00",
        "timestamp": "1774000859",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6a2b57e-beeb-4df0-9583-61587b818f11",
        "value": "grandfatherquiver.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:00:59+00:00",
        "timestamp": "1774000860",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ce29222-d0ba-46fa-aa37-4bba38c69f2f",
        "value": "gripcollar.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:00+00:00",
        "timestamp": "1774000860",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ff42a81-78d1-40dc-a90e-e99db4af1ad3",
        "value": "gripelbow.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:00+00:00",
        "timestamp": "1774000860",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7ee47d8-82d7-4946-8193-cb23d2e79685",
        "value": "gripscene.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:00+00:00",
        "timestamp": "1774000860",
        "to_ids": true,
        "type": "domain",
        "uuid": "5789a185-1c4e-49cb-bd07-83f7a3e70ac9",
        "value": "gripsleep.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:00+00:00",
        "timestamp": "1774000860",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ef4dce6-07c4-48f4-8067-4d53c5f485b8",
        "value": "guidebranch.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:00+00:00",
        "timestamp": "1774000860",
        "to_ids": true,
        "type": "domain",
        "uuid": "780f9a6c-e4fd-41c7-b4b7-8da1a2eaa2b1",
        "value": "guidebutter.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:00+00:00",
        "timestamp": "1774000861",
        "to_ids": true,
        "type": "domain",
        "uuid": "7382cc95-671c-49ce-a141-0eaa723bca63",
        "value": "guidechess.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:01+00:00",
        "timestamp": "1774000861",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f4c8de7-f5ff-48fb-9280-810920f3c068",
        "value": "guidepaper.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:01+00:00",
        "timestamp": "1774000861",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eb920c1-2f6c-4fee-8ff5-398578d9247a",
        "value": "guitarrobin.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:01+00:00",
        "timestamp": "1774000861",
        "to_ids": true,
        "type": "domain",
        "uuid": "993fd97a-e572-4676-b46c-f87066a7c4de",
        "value": "gunbear.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:01+00:00",
        "timestamp": "1774000861",
        "to_ids": true,
        "type": "domain",
        "uuid": "538e7e74-d043-4526-b899-b1dda37da54d",
        "value": "gunsongs.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:01+00:00",
        "timestamp": "1774000861",
        "to_ids": true,
        "type": "domain",
        "uuid": "49f7360a-ce01-4690-8c28-3a023aed2e82",
        "value": "halldistribution.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:01+00:00",
        "timestamp": "1774000861",
        "to_ids": true,
        "type": "domain",
        "uuid": "49962a82-44f9-4269-afbf-c889fe252c0a",
        "value": "hallfrog.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:01+00:00",
        "timestamp": "1774000862",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4df5bda-aff3-4c79-b8cb-d78d7a2bd413",
        "value": "halllunch.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:02+00:00",
        "timestamp": "1774000862",
        "to_ids": true,
        "type": "domain",
        "uuid": "48fe6b3d-af39-4e1a-92f9-d696ac65bcab",
        "value": "hammerstore.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:02+00:00",
        "timestamp": "1774000862",
        "to_ids": true,
        "type": "domain",
        "uuid": "63d2e5fc-61ff-4227-acc0-01de2cdcc24f",
        "value": "handsfog.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:02+00:00",
        "timestamp": "1774000862",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f28430b-61f3-47e6-876b-f2c3a064d323",
        "value": "harborclam.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:02+00:00",
        "timestamp": "1774000862",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fd263b8-5285-4fe1-a141-8999cd0dc3fa",
        "value": "hateair.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:02+00:00",
        "timestamp": "1774000862",
        "to_ids": true,
        "type": "domain",
        "uuid": "b29e964d-9129-4b01-b0c8-de54c3ab49b3",
        "value": "hatescale.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:02+00:00",
        "timestamp": "1774000862",
        "to_ids": true,
        "type": "domain",
        "uuid": "dad522b3-3e7a-481f-9123-92c915534995",
        "value": "hatturn.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:03+00:00",
        "timestamp": "1774000863",
        "to_ids": true,
        "type": "domain",
        "uuid": "70645791-0e15-4bb5-9ac0-1cbfa026371a",
        "value": "hatwomen.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:03+00:00",
        "timestamp": "1774000863",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0814e52-0932-419a-b686-c7ce26ca0e1d",
        "value": "healthiron.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:03+00:00",
        "timestamp": "1774000863",
        "to_ids": true,
        "type": "domain",
        "uuid": "21f4d27b-38d3-453e-ab21-753de3c8f5d8",
        "value": "heataction.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:03+00:00",
        "timestamp": "1774000863",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c7bfb88-f4f4-47fc-8d48-257fce43d5c9",
        "value": "heatbasketball.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:03+00:00",
        "timestamp": "1774000863",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e829c14-7a8e-4d8b-bc37-2d71bea86920",
        "value": "historydress.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:03+00:00",
        "timestamp": "1774000863",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3074bbe-ab95-4ea1-b743-53f6cb6d9cd8",
        "value": "holecompany.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:03+00:00",
        "timestamp": "1774000864",
        "to_ids": true,
        "type": "domain",
        "uuid": "eab6eb23-6a5a-4de8-a593-c86c3ce6b0dc",
        "value": "holelimit.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:04+00:00",
        "timestamp": "1774000864",
        "to_ids": true,
        "type": "domain",
        "uuid": "72259884-28c8-4cdb-9a42-71be5ad957c8",
        "value": "holemuscle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:04+00:00",
        "timestamp": "1774000864",
        "to_ids": true,
        "type": "domain",
        "uuid": "b87252c4-1d3d-4872-8c5b-71a336aa72b6",
        "value": "homefireman.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:04+00:00",
        "timestamp": "1774000864",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ca7b25e-19d0-4014-bb3b-38e365ba02b0",
        "value": "honeyfear.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:04+00:00",
        "timestamp": "1774000864",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d504152-737f-4920-bbc7-b953b8957a6f",
        "value": "honeytoothpaste.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:04+00:00",
        "timestamp": "1774000864",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a73e55b-553d-4944-9bae-28e970461346",
        "value": "horsesink.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:04+00:00",
        "timestamp": "1774000865",
        "to_ids": true,
        "type": "domain",
        "uuid": "a29c94f9-1f6c-42ae-9b1d-3f78170ecb76",
        "value": "horseswatch.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:05+00:00",
        "timestamp": "1774000865",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c7bac03-6e7d-4f74-bdc4-dcf3e1d37266",
        "value": "horsethunder.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:05+00:00",
        "timestamp": "1774000865",
        "to_ids": true,
        "type": "domain",
        "uuid": "d72cba09-532f-4d5d-9363-22e4ead1a6cb",
        "value": "hospitalgrain.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:05+00:00",
        "timestamp": "1774000865",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b32f49a-f5a2-428e-908a-8784fd18a49a",
        "value": "hoteffect.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:05+00:00",
        "timestamp": "1774000865",
        "to_ids": true,
        "type": "domain",
        "uuid": "d46ffede-3710-4b93-8aed-55d20cb116f2",
        "value": "hotlove.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:05+00:00",
        "timestamp": "1774000865",
        "to_ids": true,
        "type": "domain",
        "uuid": "d479d03b-2e33-43da-bb9d-4c63365ed178",
        "value": "hourchess.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:05+00:00",
        "timestamp": "1774000866",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0d117a3-b3e4-4ed8-9378-0c71d6159e81",
        "value": "housemice.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:06+00:00",
        "timestamp": "1774000866",
        "to_ids": true,
        "type": "domain",
        "uuid": "966cc1e7-483f-443b-9e5d-781c8bfd620a",
        "value": "humorsmell.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:06+00:00",
        "timestamp": "1774000866",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f96cbfb-f302-4cdc-892c-c67c110ac09e",
        "value": "hydrantdolls.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:06+00:00",
        "timestamp": "1774000866",
        "to_ids": true,
        "type": "domain",
        "uuid": "7182c889-412d-4ae1-9be7-39a61a7e9378",
        "value": "icecreature.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:06+00:00",
        "timestamp": "1774000866",
        "to_ids": true,
        "type": "domain",
        "uuid": "c26b560c-5663-451e-af32-3584b3197e61",
        "value": "icedime.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:06+00:00",
        "timestamp": "1774000866",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe46a460-95e9-478c-8115-df7013925f54",
        "value": "idearat.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:06+00:00",
        "timestamp": "1774000866",
        "to_ids": true,
        "type": "domain",
        "uuid": "484587e7-6bf5-4096-b75e-7d2a1664908f",
        "value": "incomecondition.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:06+00:00",
        "timestamp": "1774000867",
        "to_ids": true,
        "type": "domain",
        "uuid": "821e7e4c-85c4-46ea-b073-a49bf08e9da0",
        "value": "incomeengine.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:07+00:00",
        "timestamp": "1774000867",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad31d168-188d-44fb-83f4-2170d44bdce3",
        "value": "increasegrandmother.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:07+00:00",
        "timestamp": "1774000867",
        "to_ids": true,
        "type": "domain",
        "uuid": "00f1b2e3-1e6d-4001-a77d-d17ee1d2e17e",
        "value": "industryalarm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:07+00:00",
        "timestamp": "1774000867",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac004df0-f138-4b75-963c-16ecae81ca29",
        "value": "inkletters.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:07+00:00",
        "timestamp": "1774000867",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c181897-eef4-4937-9e8d-a03c09718020",
        "value": "instrumentreason.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:07+00:00",
        "timestamp": "1774000867",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ba2df3b-3056-4016-b3fd-65e93981dd89",
        "value": "instrumentvolcano.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:07+00:00",
        "timestamp": "1774000868",
        "to_ids": true,
        "type": "domain",
        "uuid": "a718c488-436c-4fbd-bc87-d4123bdeb819",
        "value": "insurancearm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:08+00:00",
        "timestamp": "1774000868",
        "to_ids": true,
        "type": "domain",
        "uuid": "befc7dcb-02bc-455d-b866-b54c879ff478",
        "value": "insurancedrain.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:08+00:00",
        "timestamp": "1774000868",
        "to_ids": true,
        "type": "domain",
        "uuid": "43786393-dfeb-4285-ac4d-d26f55ae8659",
        "value": "insuranceteam.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:08+00:00",
        "timestamp": "1774000868",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ab633db-7d86-4270-956c-fc6dcaf1d4d4",
        "value": "insurancewave.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:08+00:00",
        "timestamp": "1774000868",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8acb787-632c-45a2-89ca-b856a62ee076",
        "value": "inventioncattle.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:08+00:00",
        "timestamp": "1774000868",
        "to_ids": true,
        "type": "domain",
        "uuid": "ceb0fcb9-0487-4f16-baa4-62d6edabeea7",
        "value": "islanddigestion.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:08+00:00",
        "timestamp": "1774000868",
        "to_ids": true,
        "type": "domain",
        "uuid": "d259b683-136e-4d69-b0a8-e23db6fd2b9a",
        "value": "islandknowledge.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:08+00:00",
        "timestamp": "1774000869",
        "to_ids": true,
        "type": "domain",
        "uuid": "f94e909a-8646-4b64-920d-c707feb8a2e4",
        "value": "jamcreator.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:09+00:00",
        "timestamp": "1774000869",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1006832-c2a2-4859-ae8b-c385dd1ea482",
        "value": "jartitle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:09+00:00",
        "timestamp": "1774000869",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8cbe750-4945-4b25-a787-9b5eb48fcb80",
        "value": "jewelrail.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:09+00:00",
        "timestamp": "1774000869",
        "to_ids": true,
        "type": "domain",
        "uuid": "026a061d-a256-44fa-822b-0deabbac1b47",
        "value": "joinmitten.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:09+00:00",
        "timestamp": "1774000869",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bcd1d16-9668-4e89-8175-31f279e916dc",
        "value": "joinwine.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:09+00:00",
        "timestamp": "1774000869",
        "to_ids": true,
        "type": "domain",
        "uuid": "69fd8eab-7e5d-4320-8bb0-eb0946da6b5d",
        "value": "keylumber.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:09+00:00",
        "timestamp": "1774000870",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1fca5a1-96a9-477e-9969-27204b2ed2ae",
        "value": "keyoffer.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:10+00:00",
        "timestamp": "1774000870",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2b94962-c273-44d2-814a-d26858cd8636",
        "value": "kissfrogs.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:10+00:00",
        "timestamp": "1774000870",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc396645-d8fc-4afb-9e61-2c51ce75bac4",
        "value": "kittensgrade.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:10+00:00",
        "timestamp": "1774000870",
        "to_ids": true,
        "type": "domain",
        "uuid": "d134200a-ad15-40c8-9ec4-28b577fc8e4c",
        "value": "kittensrobin.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:10+00:00",
        "timestamp": "1774000870",
        "to_ids": true,
        "type": "domain",
        "uuid": "6288041d-172b-4715-b97a-9e87d614551a",
        "value": "kittybit.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:10+00:00",
        "timestamp": "1774000870",
        "to_ids": true,
        "type": "domain",
        "uuid": "96cc89bd-15f6-48ed-a58b-2a7ca27f19b5",
        "value": "kittydistance.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:10+00:00",
        "timestamp": "1774000870",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c77a1a1-bd15-4768-9675-61a77704d806",
        "value": "kittystew.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:10+00:00",
        "timestamp": "1774000871",
        "to_ids": true,
        "type": "domain",
        "uuid": "7dd5e78a-8e45-4004-85dd-98431a5b3449",
        "value": "knifebeginner.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:11+00:00",
        "timestamp": "1774000871",
        "to_ids": true,
        "type": "domain",
        "uuid": "424e6caa-a138-4649-a775-4fe2b98262e2",
        "value": "knotberry.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:11+00:00",
        "timestamp": "1774000871",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e0b8345-7887-4222-a58a-e99fd0841fb4",
        "value": "knotnight.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:11+00:00",
        "timestamp": "1774000871",
        "to_ids": true,
        "type": "domain",
        "uuid": "72a9f715-6b9e-4385-8bda-e6cadb0fd95c",
        "value": "lacespiders.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:11+00:00",
        "timestamp": "1774000871",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb3033e7-ebb1-4b92-b7d7-b1c8b305dd36",
        "value": "lakecars.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:11+00:00",
        "timestamp": "1774000871",
        "to_ids": true,
        "type": "domain",
        "uuid": "430934a9-b86f-4258-aff5-973e32529104",
        "value": "lampweight.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:11+00:00",
        "timestamp": "1774000872",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8c13e37-6f2b-432e-ace2-ad2acb69ddf4",
        "value": "landerror.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:12+00:00",
        "timestamp": "1774000872",
        "to_ids": true,
        "type": "domain",
        "uuid": "3173276f-a2f2-4be3-bda5-ed351acecaef",
        "value": "landflesh.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:12+00:00",
        "timestamp": "1774000872",
        "to_ids": true,
        "type": "domain",
        "uuid": "77ebdcb0-6e4b-4eac-922e-0e372e7fe880",
        "value": "laughexistence.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:12+00:00",
        "timestamp": "1774000872",
        "to_ids": true,
        "type": "domain",
        "uuid": "158f922f-0c06-429a-91de-c41127f28433",
        "value": "laughslip.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:12+00:00",
        "timestamp": "1774000872",
        "to_ids": true,
        "type": "domain",
        "uuid": "31de957f-8676-4d5c-89dd-48ad972cf5ff",
        "value": "legschance.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:12+00:00",
        "timestamp": "1774000872",
        "to_ids": true,
        "type": "domain",
        "uuid": "de17c6c1-8874-4527-8973-48de36149379",
        "value": "legverse.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:12+00:00",
        "timestamp": "1774000872",
        "to_ids": true,
        "type": "domain",
        "uuid": "46917f09-35b1-448e-9e84-fc36306babaa",
        "value": "lettermoney.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:12+00:00",
        "timestamp": "1774000873",
        "to_ids": true,
        "type": "domain",
        "uuid": "03bdaa4a-4e81-49cd-a2df-b5fdb4e9ca7b",
        "value": "lettucesink.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:13+00:00",
        "timestamp": "1774000873",
        "to_ids": true,
        "type": "domain",
        "uuid": "1395a2b1-8ceb-4be6-b87a-e9ed8890c99d",
        "value": "libraryoranges.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:13+00:00",
        "timestamp": "1774000873",
        "to_ids": true,
        "type": "domain",
        "uuid": "c746f391-e8ab-423f-bf7d-d28f8676c3f7",
        "value": "limitgrandmother.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:13+00:00",
        "timestamp": "1774000873",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ba716ac-f351-4a04-a8c0-84dc4ee3f2ad",
        "value": "lineargument.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:13+00:00",
        "timestamp": "1774000873",
        "to_ids": true,
        "type": "domain",
        "uuid": "e52361a6-c3a0-4639-a28c-090194500b61",
        "value": "linerifle.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:13+00:00",
        "timestamp": "1774000873",
        "to_ids": true,
        "type": "domain",
        "uuid": "f788f111-475d-4bb9-b381-c9ac2bfce05a",
        "value": "lipborder.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:13+00:00",
        "timestamp": "1774000873",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d282c9f-1c6c-4623-b311-0022b666ddfc",
        "value": "liptendency.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:13+00:00",
        "timestamp": "1774000874",
        "to_ids": true,
        "type": "domain",
        "uuid": "236fbecf-2e6f-4b15-ab0e-5e80fc33dd55",
        "value": "liquidtoes.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:14+00:00",
        "timestamp": "1774000874",
        "to_ids": true,
        "type": "domain",
        "uuid": "64a3cf34-c5d1-4012-91b1-0401e5546091",
        "value": "liquidwrench.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:14+00:00",
        "timestamp": "1774000874",
        "to_ids": true,
        "type": "domain",
        "uuid": "206ef3d2-ad95-4c05-80ec-9bc02017f356",
        "value": "lockdime.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:14+00:00",
        "timestamp": "1774000874",
        "to_ids": true,
        "type": "domain",
        "uuid": "1edb60c0-1238-4be5-b46c-8fb48a9ce36e",
        "value": "locketcast.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:14+00:00",
        "timestamp": "1774000874",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ab249b6-f5ab-41cb-9e5f-700bceac0578",
        "value": "locketflock.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:14+00:00",
        "timestamp": "1774000874",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fe4ada5-9667-4b43-b633-cae2fe4cc65c",
        "value": "lockettrail.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:14+00:00",
        "timestamp": "1774000875",
        "to_ids": true,
        "type": "domain",
        "uuid": "640c15be-600a-42a3-be59-7165dfea35b7",
        "value": "lockteaching.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:15+00:00",
        "timestamp": "1774000875",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3f444f6-d2fd-49b4-b91e-c43d79ed6c4f",
        "value": "lossterritory.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:15+00:00",
        "timestamp": "1774000875",
        "to_ids": true,
        "type": "domain",
        "uuid": "205dcc2c-18b9-4d9b-b88d-075920f94735",
        "value": "lowcolor.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:15+00:00",
        "timestamp": "1774000875",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea3e820f-8aed-43f1-a5fe-f671850c9cfe",
        "value": "lumberbaseball.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:15+00:00",
        "timestamp": "1774000875",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca93025c-5b2f-4da3-9008-ecedd51ee721",
        "value": "lunchstar.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:15+00:00",
        "timestamp": "1774000875",
        "to_ids": true,
        "type": "domain",
        "uuid": "96eea094-56b8-49f4-b274-84ea58c90c53",
        "value": "magicquarter.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:15+00:00",
        "timestamp": "1774000875",
        "to_ids": true,
        "type": "domain",
        "uuid": "17e8189f-b140-4d3d-842e-b49ea836a3d3",
        "value": "maidperson.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:15+00:00",
        "timestamp": "1774000876",
        "to_ids": true,
        "type": "domain",
        "uuid": "6648f1e5-fb22-4d92-a521-f114b5083a76",
        "value": "maidtin.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:16+00:00",
        "timestamp": "1774000876",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf5e8234-bc7b-4d99-a406-a175446e1bd0",
        "value": "makemyjs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:16+00:00",
        "timestamp": "1774000876",
        "to_ids": true,
        "type": "domain",
        "uuid": "924921e0-e510-4d6e-be49-c4cc61b9a81b",
        "value": "marketweek.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:16+00:00",
        "timestamp": "1774000876",
        "to_ids": true,
        "type": "domain",
        "uuid": "f35923e3-6fe0-4a12-903d-b841e349cda0",
        "value": "massblow.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:16+00:00",
        "timestamp": "1774000876",
        "to_ids": true,
        "type": "domain",
        "uuid": "709abb6e-385b-4d08-ab66-ad00e06b8c7b",
        "value": "measurequiet.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:16+00:00",
        "timestamp": "1774000876",
        "to_ids": true,
        "type": "domain",
        "uuid": "151d7bdb-5abf-4d3a-afa8-d99520187c25",
        "value": "meatbelieve.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:16+00:00",
        "timestamp": "1774000876",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e22238e-68f5-46d1-8891-ba4adb422018",
        "value": "meatcircle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:17+00:00",
        "timestamp": "1774000877",
        "to_ids": true,
        "type": "domain",
        "uuid": "843b4e6f-9bf5-40b6-9f63-2ebb24e6612f",
        "value": "meatmom.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:17+00:00",
        "timestamp": "1774000877",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbc6ec21-a5fd-4dc1-8c29-0aa47eb6253d",
        "value": "meatplace.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:17+00:00",
        "timestamp": "1774000877",
        "to_ids": true,
        "type": "domain",
        "uuid": "f73d14d5-0c29-40ed-8087-6cc93d127b0e",
        "value": "memorycompany.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:17+00:00",
        "timestamp": "1774000877",
        "to_ids": true,
        "type": "domain",
        "uuid": "93d23390-5ace-4902-96b8-77ab4fd81717",
        "value": "micesisters.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:17+00:00",
        "timestamp": "1774000877",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba04274b-8541-45b8-a1cd-ce0284cf7d71",
        "value": "middlestatement.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:17+00:00",
        "timestamp": "1774000877",
        "to_ids": true,
        "type": "domain",
        "uuid": "216f05fd-9753-45ca-a461-b320aa7e729b",
        "value": "milkname.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:17+00:00",
        "timestamp": "1774000878",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5b02856-e192-4c9a-a415-12a50223542b",
        "value": "mineevent.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:18+00:00",
        "timestamp": "1774000878",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d155f12-6f22-450a-b973-5a1adc1bc106",
        "value": "mineholiday.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:18+00:00",
        "timestamp": "1774000878",
        "to_ids": true,
        "type": "domain",
        "uuid": "0571c400-1d65-4b42-b35b-333001108829",
        "value": "ministerbuilding.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:18+00:00",
        "timestamp": "1774000878",
        "to_ids": true,
        "type": "domain",
        "uuid": "43dbf21a-5bc9-4bf6-b9d1-8601a8a2b725",
        "value": "minuteblade.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:18+00:00",
        "timestamp": "1774000878",
        "to_ids": true,
        "type": "domain",
        "uuid": "10167a91-0398-4a15-8e67-2f201b2c0f6b",
        "value": "mistcast.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:18+00:00",
        "timestamp": "1774000878",
        "to_ids": true,
        "type": "domain",
        "uuid": "55b6f661-9f5d-4f9d-8fea-4f295846d820",
        "value": "momcherries.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:18+00:00",
        "timestamp": "1774000878",
        "to_ids": true,
        "type": "domain",
        "uuid": "a15d4e47-3438-4476-a3c6-51fd7a79a8a3",
        "value": "moneyweight.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:19+00:00",
        "timestamp": "1774000879",
        "to_ids": true,
        "type": "domain",
        "uuid": "76d2971f-0087-4b8e-8696-a0e915d95107",
        "value": "monthstring.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:19+00:00",
        "timestamp": "1774000879",
        "to_ids": true,
        "type": "domain",
        "uuid": "c55670c4-4096-4af8-9a70-25bdaea1f346",
        "value": "moonsleet.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:19+00:00",
        "timestamp": "1774000879",
        "to_ids": true,
        "type": "domain",
        "uuid": "fdcf20b9-4402-477f-bf44-b1598369d36d",
        "value": "morningbadge.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:19+00:00",
        "timestamp": "1774000879",
        "to_ids": true,
        "type": "domain",
        "uuid": "b90d203f-9d81-47d3-9dda-5f0ae3a774af",
        "value": "mountainreason.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:19+00:00",
        "timestamp": "1774000879",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1cc7c82-7ded-4ff3-9a77-fe28d091a966",
        "value": "mountainrifle.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:19+00:00",
        "timestamp": "1774000879",
        "to_ids": true,
        "type": "domain",
        "uuid": "5704e5e8-367f-45d4-aa18-631e8ac1439d",
        "value": "mountainscale.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:19+00:00",
        "timestamp": "1774000880",
        "to_ids": true,
        "type": "domain",
        "uuid": "553401b8-4d66-465b-901e-27b746d39d51",
        "value": "mountainsurprise.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:20+00:00",
        "timestamp": "1774000880",
        "to_ids": true,
        "type": "domain",
        "uuid": "51cb8688-2db4-46c1-8c74-513e9d6c246e",
        "value": "mouthfruit.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:20+00:00",
        "timestamp": "1774000880",
        "to_ids": true,
        "type": "domain",
        "uuid": "43cfe5cf-579f-4fa9-910d-e06fb00b08b5",
        "value": "mouthrespect.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:20+00:00",
        "timestamp": "1774000880",
        "to_ids": true,
        "type": "domain",
        "uuid": "d36e2bde-5b0c-4069-86ba-09a8afc969b0",
        "value": "movefield.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:20+00:00",
        "timestamp": "1774000880",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2db50cd-6a93-41c1-959d-292b0daca98a",
        "value": "movewaves.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:20+00:00",
        "timestamp": "1774000881",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a8872b3-e7b1-43db-abe8-b480950e33f1",
        "value": "muscletendency.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:21+00:00",
        "timestamp": "1774000881",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc7a52ea-1e9e-4d5d-8936-58df63302f5d",
        "value": "mysharedfile.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:21+00:00",
        "timestamp": "1774000881",
        "to_ids": true,
        "type": "domain",
        "uuid": "3558a77c-4e14-432b-a3a8-6829f46abd77",
        "value": "mysystemfile.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:21+00:00",
        "timestamp": "1774000881",
        "to_ids": true,
        "type": "domain",
        "uuid": "1aeafcd4-beaf-4b5e-94d0-9ee0c54de549",
        "value": "neckcrowd.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:21+00:00",
        "timestamp": "1774000881",
        "to_ids": true,
        "type": "domain",
        "uuid": "79a820d7-2e54-4fa5-aeaa-c91e334259fd",
        "value": "needcart.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:21+00:00",
        "timestamp": "1774000881",
        "to_ids": true,
        "type": "domain",
        "uuid": "70e92484-1670-4dac-b8bb-ef0dc15c47a7",
        "value": "needcherries.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:21+00:00",
        "timestamp": "1774000881",
        "to_ids": true,
        "type": "domain",
        "uuid": "c08fe984-228c-4f8a-aab3-3a2a039efa63",
        "value": "needdevelopment.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:21+00:00",
        "timestamp": "1774000882",
        "to_ids": true,
        "type": "domain",
        "uuid": "08bc39ad-4afc-4eb8-882a-c68a785b4204",
        "value": "needleexperience.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:22+00:00",
        "timestamp": "1774000882",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f432b49-c6d1-4c38-a90c-501d6f9a5e07",
        "value": "needporter.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:22+00:00",
        "timestamp": "1774000882",
        "to_ids": true,
        "type": "domain",
        "uuid": "63dc86b0-3aea-46cd-a683-3d6578de8409",
        "value": "noiseship.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:22+00:00",
        "timestamp": "1774000882",
        "to_ids": true,
        "type": "domain",
        "uuid": "84f63ef9-553b-40f0-95c5-248fd33d5eec",
        "value": "northbox.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:22+00:00",
        "timestamp": "1774000882",
        "to_ids": true,
        "type": "domain",
        "uuid": "8504b090-08d0-46d5-a139-c650d11bc7d6",
        "value": "nosegovernor.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:22+00:00",
        "timestamp": "1774000882",
        "to_ids": true,
        "type": "domain",
        "uuid": "06e90bcd-f3e6-4a6a-b9c2-398ed61155b6",
        "value": "nosetendency.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:22+00:00",
        "timestamp": "1774000883",
        "to_ids": true,
        "type": "domain",
        "uuid": "9eac7b6f-4479-4bc2-a929-b21bb0056757",
        "value": "noteback.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:23+00:00",
        "timestamp": "1774000883",
        "to_ids": true,
        "type": "domain",
        "uuid": "356345ab-3b74-4b9e-a611-880076e42912",
        "value": "noteinsect.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:23+00:00",
        "timestamp": "1774000883",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3f0a614-6795-4f42-8c3a-9785add598e6",
        "value": "numbercushion.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:23+00:00",
        "timestamp": "1774000883",
        "to_ids": true,
        "type": "domain",
        "uuid": "63d4b4fb-bc07-4670-b7f3-e77f278251df",
        "value": "observationrecord.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:23+00:00",
        "timestamp": "1774000883",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5262140-7f8f-4e61-a19f-5c3d547be51d",
        "value": "oceanamusement.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:23+00:00",
        "timestamp": "1774000883",
        "to_ids": true,
        "type": "domain",
        "uuid": "2feab42f-a8f8-499c-b537-3a9b833e8e2e",
        "value": "offerwing.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:23+00:00",
        "timestamp": "1774000884",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d3e0911-eba4-4b41-81a3-02bb6d437a0d",
        "value": "oilgrade.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:24+00:00",
        "timestamp": "1774000884",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ed6594b-a5c7-4909-950c-2c289d843dfe",
        "value": "orangeflavor.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:24+00:00",
        "timestamp": "1774000884",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4adc5ad-edc8-4777-addf-003d2b12f0fe",
        "value": "orangespan.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:24+00:00",
        "timestamp": "1774000884",
        "to_ids": true,
        "type": "domain",
        "uuid": "75fe57a3-43c9-4ab7-8ff5-0b6bc6ab7789",
        "value": "pagedestruction.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:24+00:00",
        "timestamp": "1774000884",
        "to_ids": true,
        "type": "domain",
        "uuid": "e519d99c-dacc-4fd2-a5c8-d7080646100c",
        "value": "pagesubstance.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:24+00:00",
        "timestamp": "1774000884",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f15d97a-1e16-4de5-a4da-a1c63e288d79",
        "value": "pailchange.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:24+00:00",
        "timestamp": "1774000884",
        "to_ids": true,
        "type": "domain",
        "uuid": "aed56e5e-ba4d-4be3-8074-6c789e3c4fa0",
        "value": "paildirection.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:25+00:00",
        "timestamp": "1774000885",
        "to_ids": true,
        "type": "domain",
        "uuid": "0de5ac30-8b34-447c-b21e-6d8fb0b1d5b8",
        "value": "pancakeprotest.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:25+00:00",
        "timestamp": "1774000885",
        "to_ids": true,
        "type": "domain",
        "uuid": "732eda83-103d-4ea4-a8ff-a0e57e08d0ee",
        "value": "paperbee.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:25+00:00",
        "timestamp": "1774000885",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3d9bc1c-1e0e-4050-a19f-dd3ff1a8a590",
        "value": "parcelstem.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:25+00:00",
        "timestamp": "1774000885",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d60b2df-391d-4804-91b7-e3b20a7ccb00",
        "value": "partflesh.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:25+00:00",
        "timestamp": "1774000885",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f77c200-7b1a-4453-aa59-0a2f8cdc96e9",
        "value": "partpipe.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:25+00:00",
        "timestamp": "1774000885",
        "to_ids": true,
        "type": "domain",
        "uuid": "f84bb3a6-a5d0-435e-a615-5b867d4fe660",
        "value": "partsmoke.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:25+00:00",
        "timestamp": "1774000886",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c4f6a55-e8dd-4648-89ab-b364258d2653",
        "value": "partychildren.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:26+00:00",
        "timestamp": "1774000886",
        "to_ids": true,
        "type": "domain",
        "uuid": "f838af7a-1d99-47e9-af18-9acc675f6bbd",
        "value": "partyfriends.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:26+00:00",
        "timestamp": "1774000886",
        "to_ids": true,
        "type": "domain",
        "uuid": "31e22daf-cfbd-4de1-9853-a85ed7644514",
        "value": "passengerbrake.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:26+00:00",
        "timestamp": "1774000886",
        "to_ids": true,
        "type": "domain",
        "uuid": "17d8a931-73b6-4fd9-ae1c-3a9c7a7d15bc",
        "value": "peacegovernment.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:26+00:00",
        "timestamp": "1774000886",
        "to_ids": true,
        "type": "domain",
        "uuid": "a92baebf-9d8b-4393-b05c-7e7dca2bb3bd",
        "value": "peacepocket.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:26+00:00",
        "timestamp": "1774000886",
        "to_ids": true,
        "type": "domain",
        "uuid": "75a37b93-8ca1-45d5-ab27-db206b95c027",
        "value": "peacetongue.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:26+00:00",
        "timestamp": "1774000886",
        "to_ids": true,
        "type": "domain",
        "uuid": "846bbdcb-6fbb-4dd5-ac82-210ae1699309",
        "value": "pestinsurance.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:26+00:00",
        "timestamp": "1774000887",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fe4032d-b6c8-44f1-899b-5266a640ec1b",
        "value": "petgrade.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:27+00:00",
        "timestamp": "1774000887",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c479eba-b952-41cb-a640-2b8ac1a3b016",
        "value": "petminister.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:27+00:00",
        "timestamp": "1774000887",
        "to_ids": true,
        "type": "domain",
        "uuid": "1eec73f8-915a-4b29-8144-c52e193fa027",
        "value": "pickleblade.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:27+00:00",
        "timestamp": "1774000887",
        "to_ids": true,
        "type": "domain",
        "uuid": "511a27fd-6f1c-4c42-8544-a71a3490ada7",
        "value": "pictureporter.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:27+00:00",
        "timestamp": "1774000887",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cbb175d-3c58-45e5-9289-b0c93bc8a597",
        "value": "picturesofa.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:27+00:00",
        "timestamp": "1774000887",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b081b23-a681-4f98-a785-e733e6e1521c",
        "value": "picturesurprise.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:27+00:00",
        "timestamp": "1774000888",
        "to_ids": true,
        "type": "domain",
        "uuid": "33a4b446-378e-4686-9bac-885e92f29b60",
        "value": "piemagic.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:28+00:00",
        "timestamp": "1774000888",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa336838-f323-4ff8-8fd8-2f0484547875",
        "value": "piepoint.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:28+00:00",
        "timestamp": "1774000888",
        "to_ids": true,
        "type": "domain",
        "uuid": "c176b170-4d56-47e1-b485-191a05cdd0a3",
        "value": "pigfriend.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:28+00:00",
        "timestamp": "1774000888",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3387a3e-ff75-4df1-a84f-f0a8bf930a27",
        "value": "pigplantation.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:28+00:00",
        "timestamp": "1774000888",
        "to_ids": true,
        "type": "domain",
        "uuid": "15f4a080-61e5-4d4a-8a6a-d92830901b9b",
        "value": "pigsarm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:28+00:00",
        "timestamp": "1774000888",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ad66d5c-20cf-4599-b206-016cd5302f7a",
        "value": "pigsskirt.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:28+00:00",
        "timestamp": "1774000888",
        "to_ids": true,
        "type": "domain",
        "uuid": "053997bf-0a6c-4de8-9fd2-66f00dbe34bf",
        "value": "pipepart.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:29+00:00",
        "timestamp": "1774000889",
        "to_ids": true,
        "type": "domain",
        "uuid": "182ed09e-468a-44d8-b6bd-17ed2ee2f29d",
        "value": "pipetank.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:29+00:00",
        "timestamp": "1774000889",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cf0e5e2-6c71-476c-b8f8-54d4b758f0b2",
        "value": "pizzasthread.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:29+00:00",
        "timestamp": "1774000889",
        "to_ids": true,
        "type": "domain",
        "uuid": "6939ae81-4cb1-4654-971d-4bddcbefc600",
        "value": "placejudge.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:29+00:00",
        "timestamp": "1774000889",
        "to_ids": true,
        "type": "domain",
        "uuid": "bec66295-0876-4293-8780-40844283f8e9",
        "value": "planemist.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:29+00:00",
        "timestamp": "1774000889",
        "to_ids": true,
        "type": "domain",
        "uuid": "71b2fe7f-4e51-47bf-9ca2-6dd04a94e4da",
        "value": "plantearthquake.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:29+00:00",
        "timestamp": "1774000889",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b2bae7b-72f1-4b83-9c2d-4a0df2c247e3",
        "value": "pleasurewaves.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:29+00:00",
        "timestamp": "1774000890",
        "to_ids": true,
        "type": "domain",
        "uuid": "99e6c0c7-7013-4988-81dc-b0ce7d244f78",
        "value": "ploticicle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:30+00:00",
        "timestamp": "1774000890",
        "to_ids": true,
        "type": "domain",
        "uuid": "1016bf31-fdff-4780-a0d1-365bdd1198da",
        "value": "pointrule.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:30+00:00",
        "timestamp": "1774000890",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0c5e400-ccd9-48dd-a479-fa1f3064038d",
        "value": "poisonblade.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:30+00:00",
        "timestamp": "1774000890",
        "to_ids": true,
        "type": "domain",
        "uuid": "769ee86a-8d6e-4852-b9a2-3a65f4b9ec3c",
        "value": "poisonloss.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:30+00:00",
        "timestamp": "1774000890",
        "to_ids": true,
        "type": "domain",
        "uuid": "adbb5ed5-b612-48e2-b012-30a4cd090617",
        "value": "popcornbike.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:30+00:00",
        "timestamp": "1774000890",
        "to_ids": true,
        "type": "domain",
        "uuid": "26838117-58fc-4b7e-a246-7e8dae2d9aa3",
        "value": "popcornpump.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:30+00:00",
        "timestamp": "1774000890",
        "to_ids": true,
        "type": "domain",
        "uuid": "eba9d2af-f6ec-450e-89e8-023668304a39",
        "value": "popcornregret.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:30+00:00",
        "timestamp": "1774000891",
        "to_ids": true,
        "type": "domain",
        "uuid": "730cc9a0-f716-4ff1-b9fa-7c691c165ae6",
        "value": "porterdebt.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:31+00:00",
        "timestamp": "1774000891",
        "to_ids": true,
        "type": "domain",
        "uuid": "951bb67e-239b-4c00-a22d-d74eb9bf572c",
        "value": "porterrate.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:31+00:00",
        "timestamp": "1774000891",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9de2560-55ac-4201-8ef5-43662bdef9f9",
        "value": "positionmouth.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:31+00:00",
        "timestamp": "1774000891",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b82c58d-6d91-4d1e-b802-5bc863d22f83",
        "value": "potatotoothpaste.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:31+00:00",
        "timestamp": "1774000891",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ab3d710-d63d-4fc5-b616-933f50ea3f03",
        "value": "powderbabies.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:31+00:00",
        "timestamp": "1774000891",
        "to_ids": true,
        "type": "domain",
        "uuid": "6807d3ba-bf63-4e61-aba4-a6017732c63e",
        "value": "powderkiss.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:31+00:00",
        "timestamp": "1774000892",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab804741-4f81-4733-baa0-eb0c5ca9bc04",
        "value": "powderoffer.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:32+00:00",
        "timestamp": "1774000892",
        "to_ids": true,
        "type": "domain",
        "uuid": "1df117af-2942-413d-854e-c040c0a73bf9",
        "value": "powdersticks.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:32+00:00",
        "timestamp": "1774000892",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8f2d20a-a38e-4266-8de3-d1b559273d13",
        "value": "powerwish.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:32+00:00",
        "timestamp": "1774000892",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8d18b05-9a7e-4a01-ba9f-67e73b9b44bd",
        "value": "priceleg.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:32+00:00",
        "timestamp": "1774000892",
        "to_ids": true,
        "type": "domain",
        "uuid": "f41eac29-01c2-4f81-9688-a960cf458b16",
        "value": "profitfact.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:32+00:00",
        "timestamp": "1774000893",
        "to_ids": true,
        "type": "domain",
        "uuid": "f414dcd8-719f-463c-9c15-3403e20481b3",
        "value": "profitwork.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:33+00:00",
        "timestamp": "1774000893",
        "to_ids": true,
        "type": "domain",
        "uuid": "92e7d027-5ece-484b-8a36-5171ae2530c2",
        "value": "prosesalt.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:33+00:00",
        "timestamp": "1774000893",
        "to_ids": true,
        "type": "domain",
        "uuid": "4185aba5-795c-419b-888f-b28398bc7d14",
        "value": "prosetoothbrush.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:33+00:00",
        "timestamp": "1774000893",
        "to_ids": true,
        "type": "domain",
        "uuid": "72e87e7b-ee39-4029-baa1-f20e4977beda",
        "value": "proseuncle.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:33+00:00",
        "timestamp": "1774000893",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3c48bcd-e5cd-40cd-93d7-e7aa4e9270f5",
        "value": "protestrest.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:33+00:00",
        "timestamp": "1774000893",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee4f24db-510e-4e4e-b4dc-e801e1126690",
        "value": "pullvisitor.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:33+00:00",
        "timestamp": "1774000894",
        "to_ids": true,
        "type": "domain",
        "uuid": "56df7ac9-1cb2-46d8-8a53-01c5d04334db",
        "value": "pumpbottle.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:34+00:00",
        "timestamp": "1774000894",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4450c3e-08e4-4360-af0b-a3b71849eb5a",
        "value": "pumpiron.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:34+00:00",
        "timestamp": "1774000894",
        "to_ids": true,
        "type": "domain",
        "uuid": "64c1dad6-03a2-490e-91ac-2132d490c7af",
        "value": "pumproll.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:34+00:00",
        "timestamp": "1774000894",
        "to_ids": true,
        "type": "domain",
        "uuid": "7acaddff-09d8-4ed6-b1a4-428f57deff6a",
        "value": "purposemountain.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:34+00:00",
        "timestamp": "1774000894",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9b7de28-72ff-4159-b84a-c575479c1298",
        "value": "purposethings.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:34+00:00",
        "timestamp": "1774000894",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4fb431f-c15c-4098-a2dc-3d5592cda5bb",
        "value": "purposeuncle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:34+00:00",
        "timestamp": "1774000894",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4a96764-623c-4b61-b375-df059cdbfac3",
        "value": "pushprofit.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:34+00:00",
        "timestamp": "1774000895",
        "to_ids": true,
        "type": "domain",
        "uuid": "dabb9eb0-cbe1-4f1f-886e-e82648a84904",
        "value": "quietpest.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:35+00:00",
        "timestamp": "1774000895",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cd1c0db-0b79-4601-9628-66d1cbcca196",
        "value": "quiltbehavior.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:35+00:00",
        "timestamp": "1774000895",
        "to_ids": true,
        "type": "domain",
        "uuid": "3870f3b2-f419-4d82-9a99-51ead757e933",
        "value": "quiltchildren.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:35+00:00",
        "timestamp": "1774000895",
        "to_ids": true,
        "type": "domain",
        "uuid": "54dce840-9a5e-4b1c-98be-f371341c152c",
        "value": "quiltgirls.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:35+00:00",
        "timestamp": "1774000895",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccde645f-82b9-4c47-ad9a-0e0c964f0a37",
        "value": "quiltpin.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:35+00:00",
        "timestamp": "1774000895",
        "to_ids": true,
        "type": "domain",
        "uuid": "be1cd9d6-e5d7-4820-b5ec-1d60b32a76dd",
        "value": "quincepage.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:35+00:00",
        "timestamp": "1774000896",
        "to_ids": true,
        "type": "domain",
        "uuid": "03efe564-42db-474e-90bd-2c378f7a3a3c",
        "value": "rabbithoney.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:36+00:00",
        "timestamp": "1774000896",
        "to_ids": true,
        "type": "domain",
        "uuid": "00b89420-b74f-4546-bd69-37c8067747ef",
        "value": "rabbitsbird.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:36+00:00",
        "timestamp": "1774000896",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3c31ca4-253d-4520-bbc9-00c1115b6f8d",
        "value": "railhorse.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:36+00:00",
        "timestamp": "1774000896",
        "to_ids": true,
        "type": "domain",
        "uuid": "28d614a5-6d44-442a-bffe-225f23b2209b",
        "value": "raindeath.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:36+00:00",
        "timestamp": "1774000896",
        "to_ids": true,
        "type": "domain",
        "uuid": "62dd29ca-7102-48f8-ab40-89935e6959ae",
        "value": "rainstormfrogs.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:36+00:00",
        "timestamp": "1774000896",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4796e43-b964-454e-a5de-73d1588f3aa9",
        "value": "rainstormknot.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:36+00:00",
        "timestamp": "1774000896",
        "to_ids": true,
        "type": "domain",
        "uuid": "55964dac-d993-40ff-a13d-2b53c1e3b8b0",
        "value": "raintexture.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:36+00:00",
        "timestamp": "1774000897",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5ac865a-ed2c-4163-890d-2a4b460852f5",
        "value": "rakeprotest.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:37+00:00",
        "timestamp": "1774000897",
        "to_ids": true,
        "type": "domain",
        "uuid": "69c51ad0-710f-431e-8a1f-f7ec90ef3a99",
        "value": "rakepurpose.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:37+00:00",
        "timestamp": "1774000897",
        "to_ids": true,
        "type": "domain",
        "uuid": "d23132e4-77b0-4ffa-8a22-d8ef32e75d93",
        "value": "reactionbit.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:37+00:00",
        "timestamp": "1774000897",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bdae531-d701-442e-aecf-ee80948729dc",
        "value": "reactionpotato.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:37+00:00",
        "timestamp": "1774000897",
        "to_ids": true,
        "type": "domain",
        "uuid": "3491b2fd-ac66-4c71-a8fc-cb60c1902ebb",
        "value": "readingpart.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:37+00:00",
        "timestamp": "1774000897",
        "to_ids": true,
        "type": "domain",
        "uuid": "b18f67f8-2661-47a2-8458-5a5767010754",
        "value": "readingplace.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:37+00:00",
        "timestamp": "1774000897",
        "to_ids": true,
        "type": "domain",
        "uuid": "8695e51f-8455-47bb-8852-a8ef7292becb",
        "value": "readingscience.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:38+00:00",
        "timestamp": "1774000898",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a4fb312-7186-4dc0-80d7-4796005c478f",
        "value": "reasonachiever.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:38+00:00",
        "timestamp": "1774000898",
        "to_ids": true,
        "type": "domain",
        "uuid": "c531c669-a68a-4841-b29f-87f8dd884359",
        "value": "reasonsquirrel.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:38+00:00",
        "timestamp": "1774000898",
        "to_ids": true,
        "type": "domain",
        "uuid": "56aeda39-fe04-407a-8fc5-e647735a7111",
        "value": "receiptjelly.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:38+00:00",
        "timestamp": "1774000898",
        "to_ids": true,
        "type": "domain",
        "uuid": "5418a6e7-8c9b-4d13-acee-52620a7d7632",
        "value": "recessgiraffe.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:38+00:00",
        "timestamp": "1774000898",
        "to_ids": true,
        "type": "domain",
        "uuid": "09dc8793-639f-4666-a88a-4af591429c10",
        "value": "regretclub.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:38+00:00",
        "timestamp": "1774000898",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d39e8c5-a4f0-4f38-b4b4-1c59b3ee3d52",
        "value": "regrethouse.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:38+00:00",
        "timestamp": "1774000899",
        "to_ids": true,
        "type": "domain",
        "uuid": "300d42cb-e68c-4063-a0aa-cef116703a0a",
        "value": "regretleg.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:39+00:00",
        "timestamp": "1774000899",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cf1da8d-c6cb-4ecb-8210-0bdeb0312d1e",
        "value": "religionfoot.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:39+00:00",
        "timestamp": "1774000899",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f9fd9c0-9a7e-49cb-addf-177649fa77d2",
        "value": "representativeaddition.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:39+00:00",
        "timestamp": "1774000899",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1bec3cf-b682-4f8c-92d9-f1a796186bcc",
        "value": "requestcoal.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:39+00:00",
        "timestamp": "1774000899",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a155e3b-2c76-4420-957d-01357543b0c3",
        "value": "respectbite.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:39+00:00",
        "timestamp": "1774000899",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cadfdbb-a10e-4b05-a68c-e4a53a1fabd4",
        "value": "restbucket.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:39+00:00",
        "timestamp": "1774000900",
        "to_ids": true,
        "type": "domain",
        "uuid": "affc5dbb-0982-46e6-92e7-f94457fe0ca2",
        "value": "rewardrun.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:40+00:00",
        "timestamp": "1774000900",
        "to_ids": true,
        "type": "domain",
        "uuid": "d046c90f-97e7-4f9b-a0ba-2dbee8a77412",
        "value": "rewardscience.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:40+00:00",
        "timestamp": "1774000900",
        "to_ids": true,
        "type": "domain",
        "uuid": "e861e91b-cc0a-44b0-8630-4ed0a11ee82d",
        "value": "riceapparel.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:40+00:00",
        "timestamp": "1774000900",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bc59dda-47be-4942-b6c0-bc2c42562267",
        "value": "ricehour.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:40+00:00",
        "timestamp": "1774000900",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fc9e953-1637-442a-82be-f0e588a00f67",
        "value": "ricestar.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:40+00:00",
        "timestamp": "1774000900",
        "to_ids": true,
        "type": "domain",
        "uuid": "00418a01-2ccc-4bc0-8b99-677f3b4fffe2",
        "value": "riddlepowder.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:40+00:00",
        "timestamp": "1774000901",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f53a86e-65e1-46eb-9d6e-e877bcdd369f",
        "value": "rifledog.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:41+00:00",
        "timestamp": "1774000901",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6d69486-be12-411d-97f5-68b8f8e6efd5",
        "value": "ringspot.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:41+00:00",
        "timestamp": "1774000901",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed00d474-9e5a-41c4-8146-bcddf0206a0c",
        "value": "roadyear.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:41+00:00",
        "timestamp": "1774000901",
        "to_ids": true,
        "type": "domain",
        "uuid": "213c1775-bad2-49b9-94ec-866f3a49cf33",
        "value": "rockcredit.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:41+00:00",
        "timestamp": "1774000901",
        "to_ids": true,
        "type": "domain",
        "uuid": "add54c4b-f762-48fa-8543-d74d3db1fdcd",
        "value": "rockmotion.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:41+00:00",
        "timestamp": "1774000901",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa0a0e63-007c-46b9-a2f5-04f6c5a353f7",
        "value": "rodicicle.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:41+00:00",
        "timestamp": "1774000901",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2178409-d580-42f8-99ba-36e1a57635e0",
        "value": "rodtin.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:41+00:00",
        "timestamp": "1774000902",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f1da93d-1ec8-4c94-8cbd-d94b0db5bcec",
        "value": "rollglass.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:42+00:00",
        "timestamp": "1774000902",
        "to_ids": true,
        "type": "domain",
        "uuid": "d67a14ff-47a4-4bd1-8a0b-afe05956a674",
        "value": "roofbattle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:42+00:00",
        "timestamp": "1774000902",
        "to_ids": true,
        "type": "domain",
        "uuid": "e185e330-32d9-45f7-bc2e-e3b234a4aa0a",
        "value": "roofreaction.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:42+00:00",
        "timestamp": "1774000902",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bce1e26-26b0-4b5e-ae0c-f6bebd320ac0",
        "value": "roofvest.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:42+00:00",
        "timestamp": "1774000902",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d3d43a8-ef5e-411b-a0fe-176cadf6dbd0",
        "value": "roomsweater.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:42+00:00",
        "timestamp": "1774000902",
        "to_ids": true,
        "type": "domain",
        "uuid": "df1d6b0c-7f62-4ba8-9d46-2fc79b7fb927",
        "value": "rosecat.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:42+00:00",
        "timestamp": "1774000903",
        "to_ids": true,
        "type": "domain",
        "uuid": "1980ad2e-89c8-446f-ac0a-bdc42a0f9350",
        "value": "routeletters.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:43+00:00",
        "timestamp": "1774000903",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0802963-cfa0-4d02-a974-d27dd2f31ed4",
        "value": "rulebutton.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:43+00:00",
        "timestamp": "1774000903",
        "to_ids": true,
        "type": "domain",
        "uuid": "989f6fa4-d231-4e20-9ede-46b8b1178840",
        "value": "runhouses.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:43+00:00",
        "timestamp": "1774000903",
        "to_ids": true,
        "type": "domain",
        "uuid": "207f764c-7f7a-4e31-a9ee-ff9904f30cc4",
        "value": "sandbehavior.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:43+00:00",
        "timestamp": "1774000903",
        "to_ids": true,
        "type": "domain",
        "uuid": "608456b7-c06b-4c62-b92c-524f74479a91",
        "value": "sandroad.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:43+00:00",
        "timestamp": "1774000903",
        "to_ids": true,
        "type": "domain",
        "uuid": "8eeb5a72-7340-4963-a008-234ab1d1567e",
        "value": "scaleconnection.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:43+00:00",
        "timestamp": "1774000904",
        "to_ids": true,
        "type": "domain",
        "uuid": "4148807e-2039-47cd-b173-d084429c4ebc",
        "value": "sceneskate.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:44+00:00",
        "timestamp": "1774000904",
        "to_ids": true,
        "type": "domain",
        "uuid": "21a700a4-2037-4b5c-a50d-598c1d2ce8c0",
        "value": "scentrod.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:44+00:00",
        "timestamp": "1774000904",
        "to_ids": true,
        "type": "domain",
        "uuid": "a56ef722-2ffa-4c80-93c9-368188abab15",
        "value": "scenttrousers.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:44+00:00",
        "timestamp": "1774000904",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8a4d24b-7e80-489b-8e5b-449dd98dd72c",
        "value": "schooldoctor.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:44+00:00",
        "timestamp": "1774000904",
        "to_ids": true,
        "type": "domain",
        "uuid": "e64bd973-6b29-423a-8d8a-8862ef54ca28",
        "value": "schoolmountain.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:44+00:00",
        "timestamp": "1774000904",
        "to_ids": true,
        "type": "domain",
        "uuid": "304d1e7a-e93a-4857-8653-0bbf17d1165d",
        "value": "scissorsbox.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:45+00:00",
        "timestamp": "1774000905",
        "to_ids": true,
        "type": "domain",
        "uuid": "c72e5a6c-f4cd-41c0-a0b8-b7a556e42349",
        "value": "screwbirth.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:45+00:00",
        "timestamp": "1774000905",
        "to_ids": true,
        "type": "domain",
        "uuid": "96ab6502-ef89-476c-8b34-b7b56c3463e8",
        "value": "screwearthquake.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:45+00:00",
        "timestamp": "1774000905",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f85a8f1-3dbd-4839-bb60-40544d9262d7",
        "value": "seablade.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:45+00:00",
        "timestamp": "1774000905",
        "to_ids": true,
        "type": "domain",
        "uuid": "187ae9d7-e08e-41e5-8d20-67e5c41fa960",
        "value": "sealake.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:45+00:00",
        "timestamp": "1774000905",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e20b8d0-0741-4d11-9ef7-d7ab0fde0b2e",
        "value": "seashoreletters.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:45+00:00",
        "timestamp": "1774000905",
        "to_ids": true,
        "type": "domain",
        "uuid": "1263f2d0-5bb4-434f-ae3b-eb53b37733d5",
        "value": "seashorename.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:45+00:00",
        "timestamp": "1774000906",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fa65617-1bf3-42b4-8a4c-ba6bc2d45c2f",
        "value": "seatlace.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:46+00:00",
        "timestamp": "1774000906",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed82b043-9d49-44f4-a15b-63055397b581",
        "value": "seaword.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:46+00:00",
        "timestamp": "1774000906",
        "to_ids": true,
        "type": "domain",
        "uuid": "49cb56f3-c10a-464c-8d1f-bb70c04be93e",
        "value": "secretarybusiness.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:46+00:00",
        "timestamp": "1774000906",
        "to_ids": true,
        "type": "domain",
        "uuid": "427fc8e0-b75b-47e5-ad9c-efbe4a2be5dc",
        "value": "seedrainstorm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:46+00:00",
        "timestamp": "1774000906",
        "to_ids": true,
        "type": "domain",
        "uuid": "36156461-084c-4a65-bd65-ee42b5a0c719",
        "value": "selectiondogs.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:46+00:00",
        "timestamp": "1774000906",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd8c8803-bab6-40ec-8041-af5cd218e23d",
        "value": "senseocean.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:46+00:00",
        "timestamp": "1774000906",
        "to_ids": true,
        "type": "domain",
        "uuid": "81df2028-631b-45fa-8428-ee4fe73077ac",
        "value": "servantadvice.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:46+00:00",
        "timestamp": "1774000907",
        "to_ids": true,
        "type": "domain",
        "uuid": "909f90cf-102a-4a15-80ad-1285c7c9d601",
        "value": "shadeargument.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:47+00:00",
        "timestamp": "1774000907",
        "to_ids": true,
        "type": "domain",
        "uuid": "62a58810-9e03-4331-8b9d-cdf8447545c1",
        "value": "shadeplant.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:47+00:00",
        "timestamp": "1774000907",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce124983-0a71-40e9-b6c2-f3c0b1b60ff1",
        "value": "shadesquirrel.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:47+00:00",
        "timestamp": "1774000907",
        "to_ids": true,
        "type": "domain",
        "uuid": "279d3a6e-7b1d-4c4a-ad02-a13607130c71",
        "value": "shakeproperty.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:47+00:00",
        "timestamp": "1774000907",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a84b4d4-e63b-4190-b495-11d758d99b06",
        "value": "shakereading.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:47+00:00",
        "timestamp": "1774000907",
        "to_ids": true,
        "type": "domain",
        "uuid": "6200cccb-0453-4f9a-a146-a56798e2917c",
        "value": "shaketexture.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:47+00:00",
        "timestamp": "1774000908",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9219a44-5770-4783-a7f2-b1c57742e1e0",
        "value": "shameairport.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:48+00:00",
        "timestamp": "1774000908",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f4df178-8e0d-43d2-a8b2-cd87c8b0c6bd",
        "value": "shamefrog.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:48+00:00",
        "timestamp": "1774000908",
        "to_ids": true,
        "type": "domain",
        "uuid": "6152406a-cd71-4d54-8546-e63397dcb366",
        "value": "shapepower.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:48+00:00",
        "timestamp": "1774000908",
        "to_ids": true,
        "type": "domain",
        "uuid": "4233f200-6f24-4031-a595-dc306732aead",
        "value": "sheepboot.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:48+00:00",
        "timestamp": "1774000908",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae151d11-b99c-4c45-a28f-ef9370803540",
        "value": "sheettail.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:48+00:00",
        "timestamp": "1774000908",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0b40ca1-6e44-4a98-acce-9d60a83ffaf2",
        "value": "shelffront.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:48+00:00",
        "timestamp": "1774000908",
        "to_ids": true,
        "type": "domain",
        "uuid": "1eb8ec53-6148-460c-87fa-3ae41aad5289",
        "value": "shipbit.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:49+00:00",
        "timestamp": "1774000909",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ef46076-d48b-407b-ae9c-53a5646bceb1",
        "value": "shipnote.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:49+00:00",
        "timestamp": "1774000909",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6774296-663a-4c9b-b9dd-303d03aa26b6",
        "value": "shirtexample.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:49+00:00",
        "timestamp": "1774000909",
        "to_ids": true,
        "type": "domain",
        "uuid": "919d298c-8b37-45cf-b9be-48ba00774ea0",
        "value": "shirthorses.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:49+00:00",
        "timestamp": "1774000909",
        "to_ids": true,
        "type": "domain",
        "uuid": "98357df8-022f-4729-aed6-620c5e764bdc",
        "value": "shirtstraw.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:49+00:00",
        "timestamp": "1774000909",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a1bd696-18ea-44cf-a056-b49e181e6355",
        "value": "shockfairies.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:49+00:00",
        "timestamp": "1774000909",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f3283bc-c166-4f45-8331-2e7ecdcd2b1d",
        "value": "shoesproperty.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:49+00:00",
        "timestamp": "1774000910",
        "to_ids": true,
        "type": "domain",
        "uuid": "69d6b4c7-32c9-48ca-8e4e-c4fe67ed01e9",
        "value": "shoptax.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:50+00:00",
        "timestamp": "1774000910",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2d7177d-9a4a-45e2-84e0-8bbb96a044b9",
        "value": "silodrive.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:50+00:00",
        "timestamp": "1774000910",
        "to_ids": true,
        "type": "domain",
        "uuid": "cef56e39-caa6-45be-a240-d92a4e86593d",
        "value": "sinkchildren.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:50+00:00",
        "timestamp": "1774000910",
        "to_ids": true,
        "type": "domain",
        "uuid": "cba27c98-e6b7-4863-b0ca-a08ca346b262",
        "value": "sistertime.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:50+00:00",
        "timestamp": "1774000910",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5efb4e9-df40-4bff-ba0d-dc5e4fdf492b",
        "value": "sizeknot.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:50+00:00",
        "timestamp": "1774000910",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8ad94d1-9ebb-447f-8489-611abcb79f44",
        "value": "skatespot.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:50+00:00",
        "timestamp": "1774000910",
        "to_ids": true,
        "type": "domain",
        "uuid": "9779b6e6-a91c-45ad-9009-ddd97aff6336",
        "value": "skinbelieve.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:50+00:00",
        "timestamp": "1774000911",
        "to_ids": true,
        "type": "domain",
        "uuid": "a21c9035-133d-4684-ba9d-31a5f759143a",
        "value": "skinbomb.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:51+00:00",
        "timestamp": "1774000911",
        "to_ids": true,
        "type": "domain",
        "uuid": "da3d7194-2b48-44c9-8837-3f3da157ae1f",
        "value": "skineffect.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:51+00:00",
        "timestamp": "1774000911",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bffbf79-11e4-43cd-b936-7986c1869113",
        "value": "skirtdinosaurs.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:51+00:00",
        "timestamp": "1774000911",
        "to_ids": true,
        "type": "domain",
        "uuid": "81947f5e-d3de-4206-801e-54a533cd345a",
        "value": "skirtloss.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:51+00:00",
        "timestamp": "1774000911",
        "to_ids": true,
        "type": "domain",
        "uuid": "c888e80a-1cac-4f7c-bd79-3ed9416afa2b",
        "value": "sleepcrib.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:51+00:00",
        "timestamp": "1774000911",
        "to_ids": true,
        "type": "domain",
        "uuid": "a954568e-95a4-4529-adcf-662b30349744",
        "value": "sleettrains.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:52+00:00",
        "timestamp": "1774000912",
        "to_ids": true,
        "type": "domain",
        "uuid": "7392d74f-bbb4-4f24-a309-6542d0255826",
        "value": "sleetumbrella.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:52+00:00",
        "timestamp": "1774000912",
        "to_ids": true,
        "type": "domain",
        "uuid": "9069c2de-baeb-46e3-9807-a2938032d263",
        "value": "slipvegetable.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:52+00:00",
        "timestamp": "1774000912",
        "to_ids": true,
        "type": "domain",
        "uuid": "80a8f87f-0ec1-4654-8ce2-faf6c73396d4",
        "value": "smashdoor.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:52+00:00",
        "timestamp": "1774000912",
        "to_ids": true,
        "type": "domain",
        "uuid": "f95cefee-1c34-4b9a-934e-2b9f22ab2ee4",
        "value": "smashmagic.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:52+00:00",
        "timestamp": "1774000912",
        "to_ids": true,
        "type": "domain",
        "uuid": "b69fc6a8-ff7b-4040-a2f5-7860625ce0a3",
        "value": "smellcarpenter.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:52+00:00",
        "timestamp": "1774000912",
        "to_ids": true,
        "type": "domain",
        "uuid": "becb892e-db35-46a4-9eb5-088fd6b35058",
        "value": "smokebath.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:52+00:00",
        "timestamp": "1774000913",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce65e533-6f9d-4a89-ad0f-57b89a30658a",
        "value": "smokegrandmother.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:53+00:00",
        "timestamp": "1774000913",
        "to_ids": true,
        "type": "domain",
        "uuid": "52a1676b-7fbf-47c3-8f3f-60a9cafd45b5",
        "value": "snaketerritory.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:53+00:00",
        "timestamp": "1774000913",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dc00add-9a1a-4928-88b0-44c9581a792e",
        "value": "snowvan.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:53+00:00",
        "timestamp": "1774000913",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd985447-cb31-4b43-90b6-c35ed66da4d5",
        "value": "sockclass.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:53+00:00",
        "timestamp": "1774000913",
        "to_ids": true,
        "type": "domain",
        "uuid": "a60fd31d-153c-4b53-ae8a-87860a592cdb",
        "value": "sockfact.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:53+00:00",
        "timestamp": "1774000913",
        "to_ids": true,
        "type": "domain",
        "uuid": "25f5f502-7308-4ca4-9133-223d5b04beb7",
        "value": "songink.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:53+00:00",
        "timestamp": "1774000914",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a53bec5-4505-4564-83ca-010ea9a715e1",
        "value": "songsgrass.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:54+00:00",
        "timestamp": "1774000914",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6fb26a8-6cb1-48d1-9d8c-c20b34a1af21",
        "value": "songtheory.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:54+00:00",
        "timestamp": "1774000914",
        "to_ids": true,
        "type": "domain",
        "uuid": "89f7f02f-7c45-4232-95ee-4e66b6232fa6",
        "value": "spacebaseball.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:54+00:00",
        "timestamp": "1774000914",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e6ca7a6-9d23-4850-ae4c-fc50ff72a129",
        "value": "spadecurtain.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:54+00:00",
        "timestamp": "1774000914",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfcedb15-eeaf-48ff-a47f-724dba7f9a06",
        "value": "spadeleg.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:54+00:00",
        "timestamp": "1774000914",
        "to_ids": true,
        "type": "domain",
        "uuid": "92c4bf2e-44af-4cff-b861-45e3167c3771",
        "value": "spademilk.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:54+00:00",
        "timestamp": "1774000914",
        "to_ids": true,
        "type": "domain",
        "uuid": "5aa2e4fa-ca6f-4347-9641-b14e78e9185c",
        "value": "spadescale.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:54+00:00",
        "timestamp": "1774000915",
        "to_ids": true,
        "type": "domain",
        "uuid": "e14cac7f-8552-4183-b9a7-76ca9eab7e86",
        "value": "sparkrice.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:55+00:00",
        "timestamp": "1774000915",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7cb00e9-974b-4f94-b402-f863588944eb",
        "value": "spidersshape.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:55+00:00",
        "timestamp": "1774000915",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a257fe5-b41d-4de4-9261-1cf0640b2fd0",
        "value": "spidersslip.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:55+00:00",
        "timestamp": "1774000915",
        "to_ids": true,
        "type": "domain",
        "uuid": "adac9ac8-5060-4d41-8b06-975a37da76ed",
        "value": "spidersvisitor.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:55+00:00",
        "timestamp": "1774000915",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ff736eb-0ab5-4595-81af-568ebec5184b",
        "value": "spoonbasin.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:55+00:00",
        "timestamp": "1774000915",
        "to_ids": true,
        "type": "domain",
        "uuid": "428ae9f8-3bf6-488e-9356-ca7fb6771699",
        "value": "springdogs.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:55+00:00",
        "timestamp": "1774000916",
        "to_ids": true,
        "type": "domain",
        "uuid": "081f912f-411a-43c6-a658-17f3bddc04b1",
        "value": "spypleasure.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:56+00:00",
        "timestamp": "1774000916",
        "to_ids": true,
        "type": "domain",
        "uuid": "806185ee-1157-4d81-9ee3-da980e901ea7",
        "value": "squareconnection.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:56+00:00",
        "timestamp": "1774000916",
        "to_ids": true,
        "type": "domain",
        "uuid": "42a11f49-97b3-4068-b5f0-334144155730",
        "value": "squirrelboundary.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:56+00:00",
        "timestamp": "1774000916",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9f55fbd-52aa-4dd6-bc35-1e2e196d5dda",
        "value": "stampapproval.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:56+00:00",
        "timestamp": "1774000916",
        "to_ids": true,
        "type": "domain",
        "uuid": "8057a2bb-5963-4d87-9bdd-055608d75ff6",
        "value": "stampboard.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:56+00:00",
        "timestamp": "1774000916",
        "to_ids": true,
        "type": "domain",
        "uuid": "2949418c-f86c-43b5-bec7-d1e5fd3f0aa8",
        "value": "stampfield.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:56+00:00",
        "timestamp": "1774000916",
        "to_ids": true,
        "type": "domain",
        "uuid": "b51f21ca-2340-48b9-95e4-64d8a68f7d5c",
        "value": "stat.glasscellar.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:56+00:00",
        "timestamp": "1774000917",
        "to_ids": true,
        "type": "domain",
        "uuid": "21230e81-1718-43e7-812b-8a56bccff375",
        "value": "statementaunt.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:57+00:00",
        "timestamp": "1774000917",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce884abc-9717-4338-9775-05d9438596ba",
        "value": "statementservant.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:57+00:00",
        "timestamp": "1774000917",
        "to_ids": true,
        "type": "domain",
        "uuid": "20842ebe-4740-46f7-9058-d581bb691c72",
        "value": "statementsystem.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:57+00:00",
        "timestamp": "1774000917",
        "to_ids": true,
        "type": "domain",
        "uuid": "773c24f3-0820-4603-8c79-f16eb3472ec6",
        "value": "steamcobweb.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:57+00:00",
        "timestamp": "1774000917",
        "to_ids": true,
        "type": "domain",
        "uuid": "576ef81d-36b2-4ed6-b685-301e55f43fd1",
        "value": "steelairport.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:57+00:00",
        "timestamp": "1774000917",
        "to_ids": true,
        "type": "domain",
        "uuid": "5965b6fd-ea98-4e6b-ba31-f29e4189af0a",
        "value": "stewstamp.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:57+00:00",
        "timestamp": "1774000918",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff7abd1c-dfca-4611-b2ea-c67b6b673ef8",
        "value": "stickcredit.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:58+00:00",
        "timestamp": "1774000918",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e7c61fe-be77-44b5-bf35-61e99be2f470",
        "value": "stickvessel.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:58+00:00",
        "timestamp": "1774000918",
        "to_ids": true,
        "type": "domain",
        "uuid": "c51ad76b-eedd-4f1f-869b-1e9cb0f7a634",
        "value": "stopicicle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:58+00:00",
        "timestamp": "1774000918",
        "to_ids": true,
        "type": "domain",
        "uuid": "404ede87-7bef-4758-8e76-80ee2d4f7954",
        "value": "stopquill.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:58+00:00",
        "timestamp": "1774000918",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f4fdd3a-a8cf-4909-8f72-dfbddcd6e1d9",
        "value": "stopzinc.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:58+00:00",
        "timestamp": "1774000918",
        "to_ids": true,
        "type": "domain",
        "uuid": "abba4425-a753-43a3-a757-6fd5e5da0705",
        "value": "stovehat.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:58+00:00",
        "timestamp": "1774000918",
        "to_ids": true,
        "type": "domain",
        "uuid": "d38aeb45-f96e-4c94-a112-3f6d30eb64f5",
        "value": "streambomb.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:58+00:00",
        "timestamp": "1774000919",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b104162-d614-4616-bffe-ba0ec8103c49",
        "value": "streamknee.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:59+00:00",
        "timestamp": "1774000919",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ee92486-90e4-4c77-8466-4bf46c4ef363",
        "value": "streetmeasure.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:59+00:00",
        "timestamp": "1774000919",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c307694-b3a3-4de2-9823-6f214cf57e46",
        "value": "streettent.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:59+00:00",
        "timestamp": "1774000919",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c8090e9-2cf6-4a07-ac1f-3f2b4fca1d57",
        "value": "streetway.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:59+00:00",
        "timestamp": "1774000919",
        "to_ids": true,
        "type": "domain",
        "uuid": "738dc998-4e81-44da-bf65-1efb5499cc51",
        "value": "structurekiss.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:59+00:00",
        "timestamp": "1774000919",
        "to_ids": true,
        "type": "domain",
        "uuid": "01a43d46-baa6-4369-849f-c4d0c021c872",
        "value": "structurelinen.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:01:59+00:00",
        "timestamp": "1774000920",
        "to_ids": true,
        "type": "domain",
        "uuid": "db74b9e6-79d5-4821-82bf-b089122bf724",
        "value": "structurespot.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:00+00:00",
        "timestamp": "1774000920",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd4fac8c-e07a-40d2-80b6-b232dc575cef",
        "value": "su.saltwax.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:00+00:00",
        "timestamp": "1774000920",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6b629b9-4908-493e-91bf-cae24593ce04",
        "value": "substancemove.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:00+00:00",
        "timestamp": "1774000920",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9248d76-0d41-4591-a910-7a1fb1e07726",
        "value": "suggestioncemetery.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:00+00:00",
        "timestamp": "1774000920",
        "to_ids": true,
        "type": "domain",
        "uuid": "86acfff3-d9b3-4f9a-a40a-757b536a5181",
        "value": "suitsoap.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:00+00:00",
        "timestamp": "1774000920",
        "to_ids": true,
        "type": "domain",
        "uuid": "89a38cd4-b286-4f59-a22e-e0b6d18b041e",
        "value": "suitstraw.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:00+00:00",
        "timestamp": "1774000920",
        "to_ids": true,
        "type": "domain",
        "uuid": "0077a7f6-0b67-4b87-8bd9-453a472773af",
        "value": "sunground.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:00+00:00",
        "timestamp": "1774000921",
        "to_ids": true,
        "type": "domain",
        "uuid": "7458277a-68e1-4d01-89b4-8f48a5405167",
        "value": "sweaterpocket.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:01+00:00",
        "timestamp": "1774000921",
        "to_ids": true,
        "type": "domain",
        "uuid": "b89952fc-0a25-45d8-8644-1c518ec2bb39",
        "value": "sweatertomatoes.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:01+00:00",
        "timestamp": "1774000921",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0305719-13c2-4c5b-a102-30793647618d",
        "value": "swimlibrary.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:01+00:00",
        "timestamp": "1774000921",
        "to_ids": true,
        "type": "domain",
        "uuid": "edb0385e-220e-4684-aa15-d5c92cc70780",
        "value": "swimrest.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:01+00:00",
        "timestamp": "1774000921",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8889808-7a7d-4067-bf6d-db12fb10fe54",
        "value": "tablechess.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:01+00:00",
        "timestamp": "1774000921",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b5bf647-114a-4307-872a-b239ce18ebd2",
        "value": "tabletrains.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:01+00:00",
        "timestamp": "1774000921",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e1630c2-0346-4558-a50c-94dd7322dcc4",
        "value": "tailcoat.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:01+00:00",
        "timestamp": "1774000922",
        "to_ids": true,
        "type": "domain",
        "uuid": "d41a5f2e-4b5d-4dad-8311-575fe53d98e6",
        "value": "taildriving.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:02+00:00",
        "timestamp": "1774000922",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b97b383-fcd6-4885-afe9-3cba22df42d6",
        "value": "tailsilk.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:02+00:00",
        "timestamp": "1774000922",
        "to_ids": true,
        "type": "domain",
        "uuid": "f19275b4-8d50-4bae-a64b-8306a38b367a",
        "value": "talkbridge.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:02+00:00",
        "timestamp": "1774000922",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fd7cf16-d621-4459-a793-3be47d8e24ec",
        "value": "talkpump.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:02+00:00",
        "timestamp": "1774000922",
        "to_ids": true,
        "type": "domain",
        "uuid": "8fb95508-d076-48f1-8c4a-806343e80cca",
        "value": "talkrelation.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:02+00:00",
        "timestamp": "1774000922",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f6d2a8c-308d-4943-ba17-535debdba22a",
        "value": "tanksuggestion.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:02+00:00",
        "timestamp": "1774000923",
        "to_ids": true,
        "type": "domain",
        "uuid": "77ba1194-51c8-4476-8488-adf12b3a2209",
        "value": "tasteskate.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:03+00:00",
        "timestamp": "1774000923",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e1d1f09-ca8d-4800-96b7-986372a1bfec",
        "value": "teachingbutter.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:03+00:00",
        "timestamp": "1774000923",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1465697-0256-4cd4-8103-0313ee646da8",
        "value": "teachingmeasure.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:03+00:00",
        "timestamp": "1774000923",
        "to_ids": true,
        "type": "domain",
        "uuid": "f76a5a3b-339b-45a6-a664-6e1d31410019",
        "value": "teamseashore.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:03+00:00",
        "timestamp": "1774000923",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfa1e8cb-bc5c-4fe7-b3b5-8c9d879631f9",
        "value": "tendencybed.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:03+00:00",
        "timestamp": "1774000923",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f34d604-0717-48f2-9f91-018bf4315631",
        "value": "tendencydigestion.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:03+00:00",
        "timestamp": "1774000924",
        "to_ids": true,
        "type": "domain",
        "uuid": "a46014c8-9b05-4980-bdd4-08a37dadefa3",
        "value": "tenttiger.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:04+00:00",
        "timestamp": "1774000924",
        "to_ids": true,
        "type": "domain",
        "uuid": "95dd8eb7-16f8-4466-a6d4-368f5fe47ec0",
        "value": "territorycamp.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:04+00:00",
        "timestamp": "1774000924",
        "to_ids": true,
        "type": "domain",
        "uuid": "62ef9da1-ccd7-4295-9b72-f1588ba87144",
        "value": "territorycaption.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:04+00:00",
        "timestamp": "1774000924",
        "to_ids": true,
        "type": "domain",
        "uuid": "98af263b-56bd-414f-af17-d6bef0898b77",
        "value": "territorytitle.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:04+00:00",
        "timestamp": "1774000924",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b934665-7687-4c5a-b370-2e870d1ee517",
        "value": "testminister.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:04+00:00",
        "timestamp": "1774000924",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d6fd4c8-1c7d-4ef2-8018-3d33c378e41a",
        "value": "texturebadge.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:04+00:00",
        "timestamp": "1774000924",
        "to_ids": true,
        "type": "domain",
        "uuid": "80dfb1c3-63a7-4e33-b7b3-5bc1fca0ffb5",
        "value": "texturerequest.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:05+00:00",
        "timestamp": "1774000925",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b4fc4f9-79e1-4ffe-aa2d-f6c62b5f06a1",
        "value": "theoryfood.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:05+00:00",
        "timestamp": "1774000925",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c6e6601-630c-430e-a679-a45bbd6efccf",
        "value": "theorylaugh.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:05+00:00",
        "timestamp": "1774000925",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d664f6d-eff6-4fe6-b62c-5b128d228a2f",
        "value": "theoryproperty.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:05+00:00",
        "timestamp": "1774000925",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3b3dffd-ebda-48f5-8a55-97e93d721e35",
        "value": "theoryyear.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:05+00:00",
        "timestamp": "1774000925",
        "to_ids": true,
        "type": "domain",
        "uuid": "441e41e1-8c4a-449e-ab61-438f1e961644",
        "value": "thingbrass.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:05+00:00",
        "timestamp": "1774000925",
        "to_ids": true,
        "type": "domain",
        "uuid": "f551dc51-42d8-4410-8137-bb2555b67224",
        "value": "thingseye.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:05+00:00",
        "timestamp": "1774000926",
        "to_ids": true,
        "type": "domain",
        "uuid": "10bb243b-743f-4f19-b7b2-bb7f499292cb",
        "value": "thoughtslave.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:06+00:00",
        "timestamp": "1774000926",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fa31357-bb04-4612-bfc8-28bc0e4cdc4c",
        "value": "threadfuel.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:06+00:00",
        "timestamp": "1774000926",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2b3c75e-4562-47f1-ae56-7fef7285996b",
        "value": "threadhydrant.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:06+00:00",
        "timestamp": "1774000926",
        "to_ids": true,
        "type": "domain",
        "uuid": "080ab18a-4201-453d-b2df-6cd3696fb8eb",
        "value": "threadproperty.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:06+00:00",
        "timestamp": "1774000926",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cc3f6a7-0bd4-43d1-bdfd-91b93c540886",
        "value": "threadseat.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:06+00:00",
        "timestamp": "1774000926",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a7ed29e-5b16-4cc5-971a-cb43c6103234",
        "value": "thrillducks.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:06+00:00",
        "timestamp": "1774000926",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca9cd5c3-62c2-468e-8f21-0c22597c4e42",
        "value": "throneback.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:07+00:00",
        "timestamp": "1774000927",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d576eaa-2038-428d-a6bf-d50cd9d88745",
        "value": "thunderexpansion.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:07+00:00",
        "timestamp": "1774000927",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddd42e8a-488c-4a98-b090-191aa53b8da2",
        "value": "thunderpot.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:07+00:00",
        "timestamp": "1774000927",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c0d2696-d121-4382-9007-1a0df9fa6f7c",
        "value": "ticketyarn.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:07+00:00",
        "timestamp": "1774000927",
        "to_ids": true,
        "type": "domain",
        "uuid": "85cf853c-2150-4426-80b7-ac7ea22f3c71",
        "value": "tigerwish.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:07+00:00",
        "timestamp": "1774000927",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcbc6350-fd12-4b9c-8d87-d0d85940b918",
        "value": "tinattraction.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:07+00:00",
        "timestamp": "1774000927",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c95c146-bc6a-4cb5-bd8f-5627a8c9a3a2",
        "value": "tinmass.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:07+00:00",
        "timestamp": "1774000928",
        "to_ids": true,
        "type": "domain",
        "uuid": "fede8a48-c3e0-4a79-9946-2c515cbae964",
        "value": "tinsofa.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:08+00:00",
        "timestamp": "1774000928",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5511e2b-9e32-47de-99f1-865c2ca9b346",
        "value": "titlewaste.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:08+00:00",
        "timestamp": "1774000928",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b1a61c4-7f49-4501-a706-0b585c1e0970",
        "value": "toeliquid.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:08+00:00",
        "timestamp": "1774000928",
        "to_ids": true,
        "type": "domain",
        "uuid": "929f9b52-cb19-4adf-8b99-66f233e0cead",
        "value": "toespiders.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:08+00:00",
        "timestamp": "1774000928",
        "to_ids": true,
        "type": "domain",
        "uuid": "46fbdc1d-545e-4d97-a174-0c0f3ca93fd0",
        "value": "toothpastecake.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:08+00:00",
        "timestamp": "1774000928",
        "to_ids": true,
        "type": "domain",
        "uuid": "14ca47f5-082d-4cfc-a223-7c20a2b1da67",
        "value": "toothpastename.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:08+00:00",
        "timestamp": "1774000928",
        "to_ids": true,
        "type": "domain",
        "uuid": "e696f36a-5369-40f8-a831-a47abc28ba21",
        "value": "toothpastesense.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:09+00:00",
        "timestamp": "1774000929",
        "to_ids": true,
        "type": "domain",
        "uuid": "a93a63dd-5e26-4c13-956b-151b1b47033a",
        "value": "toothsong.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:09+00:00",
        "timestamp": "1774000929",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a52383b-3bc5-4d16-a913-3a4f9eee64ba",
        "value": "touchmoney.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:09+00:00",
        "timestamp": "1774000929",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5f47ebb-4ea8-4708-84de-db629b9743a6",
        "value": "townexistence.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:09+00:00",
        "timestamp": "1774000929",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bebbe8b-e8c9-40ee-9b5f-df8a3417357e",
        "value": "townknowledge.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:09+00:00",
        "timestamp": "1774000929",
        "to_ids": true,
        "type": "domain",
        "uuid": "863b03c2-4103-425d-9bad-dc24acf46e57",
        "value": "townnoise.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:09+00:00",
        "timestamp": "1774000929",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ff76511-f767-47ab-8518-d928fbb40ba0",
        "value": "townquiver.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:09+00:00",
        "timestamp": "1774000930",
        "to_ids": true,
        "type": "domain",
        "uuid": "1515318f-65a7-4c78-85b9-f8f1adc71910",
        "value": "trailcontrol.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:10+00:00",
        "timestamp": "1774000930",
        "to_ids": true,
        "type": "domain",
        "uuid": "182c098e-fbd3-4f82-bebf-692dcd29f1af",
        "value": "trainreligion.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:10+00:00",
        "timestamp": "1774000930",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddcd1ba2-83a6-4559-9f2d-bc13573ac2ba",
        "value": "trampeffect.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:10+00:00",
        "timestamp": "1774000930",
        "to_ids": true,
        "type": "domain",
        "uuid": "f287ee98-474d-4331-8a07-9d784874cb95",
        "value": "transportday.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:10+00:00",
        "timestamp": "1774000930",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d21fb82-4f4c-48e6-9a8d-700c5f78a1f5",
        "value": "transportlamp.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:10+00:00",
        "timestamp": "1774000930",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2869c5d-0635-48b6-8ac6-74416385cb3e",
        "value": "traychange.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:10+00:00",
        "timestamp": "1774000931",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fbd8d7a-78dc-4df1-842c-210b9a3c964b",
        "value": "treesboard.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:11+00:00",
        "timestamp": "1774000931",
        "to_ids": true,
        "type": "domain",
        "uuid": "07a7ee8a-6ac4-48ab-819a-92152df5001e",
        "value": "treesstem.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:11+00:00",
        "timestamp": "1774000931",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7a92cc8-d93a-4338-9ebe-aab42bdaef63",
        "value": "trickamount.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:11+00:00",
        "timestamp": "1774000931",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd37f342-7eaa-4aaa-91ff-3d5cdaceac0b",
        "value": "trickbushes.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:11+00:00",
        "timestamp": "1774000931",
        "to_ids": true,
        "type": "domain",
        "uuid": "40eb1843-d165-4501-a124-87c38d3d892b",
        "value": "trickflag.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:11+00:00",
        "timestamp": "1774000931",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2087ed3-46e5-414c-9d97-3aa083cf990d",
        "value": "trickrecord.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:11+00:00",
        "timestamp": "1774000931",
        "to_ids": true,
        "type": "domain",
        "uuid": "da4b10de-ad25-4060-846e-62db1adacd8e",
        "value": "truckcontrol.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:11+00:00",
        "timestamp": "1774000932",
        "to_ids": true,
        "type": "domain",
        "uuid": "69239573-ffbf-46a5-825b-012de415e037",
        "value": "truckpig.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:12+00:00",
        "timestamp": "1774000932",
        "to_ids": true,
        "type": "domain",
        "uuid": "321a44ba-04fb-4ea0-b4e1-4e2bf81a0769",
        "value": "truckshat.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:12+00:00",
        "timestamp": "1774000932",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf191040-4c76-4e4f-9877-f44a2907eda3",
        "value": "tubvalue.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:12+00:00",
        "timestamp": "1774000932",
        "to_ids": true,
        "type": "domain",
        "uuid": "169ab603-d421-4c55-b681-215e1af363d1",
        "value": "turnclass.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:12+00:00",
        "timestamp": "1774000932",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2874f14-e588-4059-bccd-f0cccb48db83",
        "value": "umbrellaquestion.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:12+00:00",
        "timestamp": "1774000932",
        "to_ids": true,
        "type": "domain",
        "uuid": "35083d49-172a-4b16-bfa5-036af94eb43c",
        "value": "umbrellaroad.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:12+00:00",
        "timestamp": "1774000933",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce09502b-9ede-47b2-9c8e-ed38857f8100",
        "value": "vacationengine.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:13+00:00",
        "timestamp": "1774000933",
        "to_ids": true,
        "type": "domain",
        "uuid": "266cccdb-e2f4-426f-871b-4bc4bff4e28f",
        "value": "vacationthought.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:13+00:00",
        "timestamp": "1774000933",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ffa90b1-4d11-4d04-99d3-36cee64383b6",
        "value": "valueroof.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:13+00:00",
        "timestamp": "1774000933",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3b78361-3732-4504-9475-c904c2d47743",
        "value": "vantoe.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:13+00:00",
        "timestamp": "1774000933",
        "to_ids": true,
        "type": "domain",
        "uuid": "a417f7d8-a55a-40c6-ba7b-78fa91191938",
        "value": "vaselegs.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:13+00:00",
        "timestamp": "1774000933",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae185a88-4e34-434b-b11d-6e9950cb2352",
        "value": "veilpowder.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:13+00:00",
        "timestamp": "1774000933",
        "to_ids": true,
        "type": "domain",
        "uuid": "afea5e82-04d3-403c-a486-db31e8681725",
        "value": "veilrock.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:13+00:00",
        "timestamp": "1774000934",
        "to_ids": true,
        "type": "domain",
        "uuid": "767114c4-6082-4218-9484-12a0337261f4",
        "value": "veiltitle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:14+00:00",
        "timestamp": "1774000934",
        "to_ids": true,
        "type": "domain",
        "uuid": "12d5681e-6678-4477-bcf5-4bf5003113bf",
        "value": "veinwhistle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:14+00:00",
        "timestamp": "1774000934",
        "to_ids": true,
        "type": "domain",
        "uuid": "889738ce-435a-48ea-b851-6ddf0690f194",
        "value": "verserun.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:14+00:00",
        "timestamp": "1774000934",
        "to_ids": true,
        "type": "domain",
        "uuid": "37b599e4-9bf3-48d5-a35c-1632f43e50b9",
        "value": "vesselcreator.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:14+00:00",
        "timestamp": "1774000934",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ac36255-5c78-4000-b380-7b7cf919c5a9",
        "value": "vesselstew.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:14+00:00",
        "timestamp": "1774000934",
        "to_ids": true,
        "type": "domain",
        "uuid": "ceefd450-e948-4b67-a3b9-c2d1d032a419",
        "value": "vesselsystem.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:14+00:00",
        "timestamp": "1774000934",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4050081-7046-465a-9837-b775260dd352",
        "value": "viewblood.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:14+00:00",
        "timestamp": "1774000935",
        "to_ids": true,
        "type": "domain",
        "uuid": "243bb646-0e48-44fe-b73f-851253b0697b",
        "value": "viewgrandmother.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:15+00:00",
        "timestamp": "1774000935",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd902a34-ee4e-4309-b225-5ca6f6ceeae9",
        "value": "viewschool.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:15+00:00",
        "timestamp": "1774000935",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e674350-4ebb-42e7-9ead-8f64020bfd7e",
        "value": "voicefarm.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:15+00:00",
        "timestamp": "1774000935",
        "to_ids": true,
        "type": "domain",
        "uuid": "99080502-635c-42f8-8f38-ac4a7b9cd2e8",
        "value": "volcanomove.art",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:15+00:00",
        "timestamp": "1774000935",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0b95a43-284e-4a0e-b999-561eb1735703",
        "value": "voyagecelery.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:15+00:00",
        "timestamp": "1774000935",
        "to_ids": true,
        "type": "domain",
        "uuid": "259ee52f-31ac-495e-8261-9b887da3e7f1",
        "value": "voyagelaugh.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:15+00:00",
        "timestamp": "1774000936",
        "to_ids": true,
        "type": "domain",
        "uuid": "ead74051-69dd-4284-91b2-fc286b5ada3e",
        "value": "voyagesummer.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:16+00:00",
        "timestamp": "1774000936",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef729acc-d917-456c-9c00-b90da42fba3d",
        "value": "washhydrant.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:16+00:00",
        "timestamp": "1774000936",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9625f54-ff7b-4b54-b8ad-f5e6eedb234f",
        "value": "wastegrape.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:16+00:00",
        "timestamp": "1774000936",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cbc0e36-9d63-4a6f-bec4-5d96a3b69d29",
        "value": "wastegrass.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:16+00:00",
        "timestamp": "1774000936",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a7f4965-d8ee-4d82-ae53-d7b62918e2ab",
        "value": "wastereading.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:16+00:00",
        "timestamp": "1774000936",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc751d09-2294-4421-9330-b0d43e457950",
        "value": "wastewine.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:16+00:00",
        "timestamp": "1774000936",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ade0016-a501-4d34-9320-b4463de1312f",
        "value": "watchbear.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:16+00:00",
        "timestamp": "1774000937",
        "to_ids": true,
        "type": "domain",
        "uuid": "06947211-789c-4a24-8eae-24e2d50f9a47",
        "value": "watchcake.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:17+00:00",
        "timestamp": "1774000937",
        "to_ids": true,
        "type": "domain",
        "uuid": "99638c34-105b-4f7f-b873-9814dea36945",
        "value": "watchstomach.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:17+00:00",
        "timestamp": "1774000937",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4700402-4272-483d-8983-29b4422bcae0",
        "value": "watersheep.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:17+00:00",
        "timestamp": "1774000937",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ddc6f4a-f9c4-4150-b40c-77b4b9f0cd36",
        "value": "wavebutter.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:17+00:00",
        "timestamp": "1774000937",
        "to_ids": true,
        "type": "domain",
        "uuid": "626484ce-ecc3-4c07-9e6c-4c3965a036d1",
        "value": "wavelunch.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:17+00:00",
        "timestamp": "1774000937",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcc558ea-bcda-4a32-8409-c2705b89d332",
        "value": "wavepan.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:17+00:00",
        "timestamp": "1774000938",
        "to_ids": true,
        "type": "domain",
        "uuid": "646c72b3-c842-4aa3-bd3e-d4a0ae0cd333",
        "value": "wavestramp.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:18+00:00",
        "timestamp": "1774000938",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb382299-1a2c-4303-8bda-3a8a7bec7ed7",
        "value": "waybikes.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:18+00:00",
        "timestamp": "1774000938",
        "to_ids": true,
        "type": "domain",
        "uuid": "843463d7-63f2-4461-b4a5-015afe44d0e1",
        "value": "waysquirrel.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:18+00:00",
        "timestamp": "1774000938",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d31bf26-c25f-4592-b80e-d46cfa2d3e5f",
        "value": "weatherforce.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:18+00:00",
        "timestamp": "1774000938",
        "to_ids": true,
        "type": "domain",
        "uuid": "6243461a-f1f3-4921-95fa-1c28a61af886",
        "value": "weatherpopcorn.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:18+00:00",
        "timestamp": "1774000938",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e8543e1-bf8a-402f-ac45-c0fd01f176da",
        "value": "whistlesong.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:18+00:00",
        "timestamp": "1774000938",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7469f3d-dcb1-4569-88bb-805cb105b30e",
        "value": "wildernesscopper.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:18+00:00",
        "timestamp": "1774000939",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4448df1-ba0f-45ac-975b-fb3d6f37b9a5",
        "value": "windorange.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:19+00:00",
        "timestamp": "1774000939",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac653ee0-7458-49ae-b057-1268a757e6a3",
        "value": "wireswim.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:19+00:00",
        "timestamp": "1774000939",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5a335a0-3266-4d21-acea-61d760435a9b",
        "value": "wishspy.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:19+00:00",
        "timestamp": "1774000939",
        "to_ids": true,
        "type": "domain",
        "uuid": "2621ff14-b25e-44bb-a141-d9d4a8e7a097",
        "value": "womanegg.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:19+00:00",
        "timestamp": "1774000939",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ae76765-aaf2-48f6-94b2-e29b3ff9b4b3",
        "value": "woodtooth.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:19+00:00",
        "timestamp": "1774000939",
        "to_ids": true,
        "type": "domain",
        "uuid": "84b61222-baeb-431e-a093-56d4c7be96c5",
        "value": "wooldad.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:19+00:00",
        "timestamp": "1774000939",
        "to_ids": true,
        "type": "domain",
        "uuid": "c24980ff-4208-4102-b76f-a7684bb2ef45",
        "value": "workspy.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:20+00:00",
        "timestamp": "1774000940",
        "to_ids": true,
        "type": "domain",
        "uuid": "f43ded2d-042a-4ae3-9335-b96b94b61d6d",
        "value": "wormairplane.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:20+00:00",
        "timestamp": "1774000940",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8eb127a-c292-48da-9a2d-0f8c10031230",
        "value": "wormneed.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:20+00:00",
        "timestamp": "1774000940",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f8edaa9-ef4a-41c3-84c2-abf73415bdf6",
        "value": "wormspark.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:20+00:00",
        "timestamp": "1774000940",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f8cd9ae-ebe6-46be-8bd7-0f769c625943",
        "value": "woundsecretary.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:20+00:00",
        "timestamp": "1774000940",
        "to_ids": true,
        "type": "domain",
        "uuid": "847d64f5-1560-4d08-9cc9-119ce0a542ec",
        "value": "wrenbrake.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:20+00:00",
        "timestamp": "1774000940",
        "to_ids": true,
        "type": "domain",
        "uuid": "405a0aa1-40a7-42a7-a5a7-bf0400baa98e",
        "value": "wrenchsense.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:20+00:00",
        "timestamp": "1774000941",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c35868e-93d1-40f1-a618-af1ad6476a41",
        "value": "wrenobservation.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:21+00:00",
        "timestamp": "1774000941",
        "to_ids": true,
        "type": "domain",
        "uuid": "9375cdc9-1829-4f12-9c11-499e30372429",
        "value": "wristcakes.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:21+00:00",
        "timestamp": "1774000941",
        "to_ids": true,
        "type": "domain",
        "uuid": "8be389ed-0530-4766-b7ef-9c21e0741589",
        "value": "wristseashore.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:21+00:00",
        "timestamp": "1774000941",
        "to_ids": true,
        "type": "domain",
        "uuid": "dedfa44a-1253-48c8-a3a2-01dd659e9240",
        "value": "writinghands.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:21+00:00",
        "timestamp": "1774000941",
        "to_ids": true,
        "type": "domain",
        "uuid": "beeb3807-f736-4cce-8551-2f21aacd0b17",
        "value": "writingmatch.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:21+00:00",
        "timestamp": "1774000941",
        "to_ids": true,
        "type": "domain",
        "uuid": "17ff7d03-e727-4a31-9893-5de173eba207",
        "value": "yakplace.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:21+00:00",
        "timestamp": "1774000942",
        "to_ids": true,
        "type": "domain",
        "uuid": "117c07ff-1ae8-44ff-b830-d35d983914e7",
        "value": "yakwren.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:22+00:00",
        "timestamp": "1774000942",
        "to_ids": true,
        "type": "domain",
        "uuid": "54e09139-e812-4bae-b963-ae49a743fe59",
        "value": "yamlock.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:22+00:00",
        "timestamp": "1774000942",
        "to_ids": true,
        "type": "domain",
        "uuid": "448ae669-ba30-4ae9-8714-aa0c2347f628",
        "value": "yamnote.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:22+00:00",
        "timestamp": "1774000942",
        "to_ids": true,
        "type": "domain",
        "uuid": "aab2a114-3aa2-42b9-ac61-49f0b738c0b9",
        "value": "yamsmell.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:22+00:00",
        "timestamp": "1774000942",
        "to_ids": true,
        "type": "domain",
        "uuid": "a78fe574-36ec-41ac-8369-b65e46350fe7",
        "value": "yamsmoke.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:22+00:00",
        "timestamp": "1774000942",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ac25ccc-5e70-47c4-88b2-01790e89e3ed",
        "value": "yardvalue.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:22+00:00",
        "timestamp": "1774000942",
        "to_ids": true,
        "type": "domain",
        "uuid": "10dacbea-7b79-429e-bf16-dd2afc00bb8d",
        "value": "yarndaughter.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:22+00:00",
        "timestamp": "1774000943",
        "to_ids": true,
        "type": "domain",
        "uuid": "17563344-70c3-420a-9eed-718f8c281ca6",
        "value": "yarnsecretary.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:23+00:00",
        "timestamp": "1774000943",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d6b80d0-98d4-4bd1-8ee3-d8b1852c1178",
        "value": "yearicicle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:23+00:00",
        "timestamp": "1774000943",
        "to_ids": true,
        "type": "domain",
        "uuid": "0473fbe7-d86a-4d36-bf3c-0b0df8921a12",
        "value": "yeartin.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:23+00:00",
        "timestamp": "1774000943",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc719c01-c459-4de2-b20d-90ed4130c528",
        "value": "zebratransport.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:23+00:00",
        "timestamp": "1774000943",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0524628-4a05-4771-81f4-39e2b9c5f3e0",
        "value": "zincapproval.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:23+00:00",
        "timestamp": "1774000943",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3aa7a3d-50bc-4d1c-a8dd-ff206d63f051",
        "value": "zincrainstorm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:23+00:00",
        "timestamp": "1774000943",
        "to_ids": false,
        "type": "url",
        "uuid": "6342ebe3-50da-4e34-9105-6a8903ba7191",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/850581b05b3fba4cdb50d6104ba4e2ebb84f5f72",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:24+00:00",
        "timestamp": "1774000944",
        "to_ids": false,
        "type": "url",
        "uuid": "caa12a82-0797-4d3b-9f7b-d8559a5aaeab",
        "value": "https://x.com/suyog41/status/2034847398380568799",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:24+00:00",
        "timestamp": "1774000944",
        "to_ids": false,
        "type": "url",
        "uuid": "1e8a9f26-227c-411b-ab57-923d05f5ea5c",
        "value": "https://www.virustotal.com/gui/file/7ae0106a9652c66ad2bce561a3211dcb989448f5cfce8ac74b8a6d6f83e3147f/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:24+00:00",
        "timestamp": "1774000944",
        "to_ids": false,
        "type": "url",
        "uuid": "399c5af4-687d-4c5f-9ab8-249212e23521",
        "value": "https://www.virustotal.com/gui/file/dcaa93844681bce1881ae08bbbb9eeb35d4773574ea1f5cb1c8ddae6d2662b3c/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:24+00:00",
        "timestamp": "1774000944",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c02e457-cf2e-4cad-89ee-2cc8ba488bee",
        "value": "beltoxer.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:24+00:00",
        "timestamp": "1774000944",
        "to_ids": false,
        "type": "url",
        "uuid": "7d1503b5-e363-4ca2-842b-9c4b9b07bd6b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ef34f7ef28b549eb2645cbe832f8f9d8428cac10",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:24+00:00",
        "timestamp": "1774000944",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd777fc2-68f5-4720-80d6-b81723b42e2e",
        "value": "filelogicstack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:24+00:00",
        "timestamp": "1774000945",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3fc7ebd-6a4f-4cb8-b637-a0aaccda4355",
        "value": "filematrixhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:25+00:00",
        "timestamp": "1774000945",
        "to_ids": true,
        "type": "domain",
        "uuid": "88488f63-7ab3-4ef2-89a2-ab1332554cc4",
        "value": "macsoft834os.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:25+00:00",
        "timestamp": "1774000945",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd5af3ab-2b7f-4f0c-b9a5-d5f7fd0b3197",
        "value": "noconahillscountryclub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:25+00:00",
        "timestamp": "1774000945",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf09ea5a-8ce4-41e8-87a5-76b5e5edcc4b",
        "value": "stripperlocker.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:25+00:00",
        "timestamp": "1774000945",
        "to_ids": true,
        "type": "domain",
        "uuid": "6da8cbb7-e631-4adb-8cd6-3d47d13e2bb1",
        "value": "theguardian247365.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:25+00:00",
        "timestamp": "1774000945",
        "to_ids": true,
        "type": "domain",
        "uuid": "63524c77-5cbb-413b-9784-8c0003caf9b1",
        "value": "clambjjiskasf.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T10:02:25+00:00",
        "timestamp": "1774000946",
        "to_ids": true,
        "type": "domain",
        "uuid": "61312d27-24e3-4791-a7e3-2ef9280c0d6c",
        "value": "macstokgamakslgas.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:03+00:00",
        "timestamp": "1774004404",
        "to_ids": false,
        "type": "url",
        "uuid": "e3711923-662a-4321-b0cf-2b1ca5f6312c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/75617719c36ce0bfedea13127d8dd591fb8e31ba",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:04+00:00",
        "timestamp": "1774004405",
        "to_ids": true,
        "type": "domain",
        "uuid": "77e03409-af18-4081-8383-00379400ac98",
        "value": "achieverbreath.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:05+00:00",
        "timestamp": "1774004406",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6a774f5-94c5-4d76-a4f7-b7aecff50c3a",
        "value": "advertisementteeth.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:06+00:00",
        "timestamp": "1774004406",
        "to_ids": true,
        "type": "domain",
        "uuid": "66cacbbb-f8cc-4898-9aec-6ad35b7da981",
        "value": "airportmonth.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:06+00:00",
        "timestamp": "1774004406",
        "to_ids": true,
        "type": "domain",
        "uuid": "243f47d7-ecf2-4c84-9184-cf4891701e12",
        "value": "bathcemetery.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:06+00:00",
        "timestamp": "1774004406",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3109c6b-6d63-40c1-addf-263240bd0717",
        "value": "beliefdress.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:06+00:00",
        "timestamp": "1774004406",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0821e9e-e974-42f3-a89d-943eed6134cf",
        "value": "belieffield.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:06+00:00",
        "timestamp": "1774004407",
        "to_ids": true,
        "type": "domain",
        "uuid": "653ef7d5-d8e9-45fc-b6b2-af2ca71c3f1e",
        "value": "breathgrandmother.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:07+00:00",
        "timestamp": "1774004407",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0e4ab71-c97f-4527-b783-17829bba85b0",
        "value": "chalkdevelopment.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:07+00:00",
        "timestamp": "1774004407",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3893734-7617-4c63-85c2-361ace39a1b7",
        "value": "cloverwhistle.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:07+00:00",
        "timestamp": "1774004407",
        "to_ids": true,
        "type": "domain",
        "uuid": "16a7b032-2ff2-4491-b323-4e5eeeb798a0",
        "value": "colorjudge.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:07+00:00",
        "timestamp": "1774004407",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef84c4e2-c46d-4dfc-8104-36ad84f39af0",
        "value": "cuptooth.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:07+00:00",
        "timestamp": "1774004407",
        "to_ids": true,
        "type": "domain",
        "uuid": "11f9570c-775b-4722-a8b0-5acb7d6d5fb4",
        "value": "deeraddition.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:07+00:00",
        "timestamp": "1774004407",
        "to_ids": true,
        "type": "domain",
        "uuid": "982487ad-aec0-41a3-8044-e8c9870fb628",
        "value": "doorsteel.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:07+00:00",
        "timestamp": "1774004408",
        "to_ids": true,
        "type": "domain",
        "uuid": "2036fc9b-1e48-4e8e-85f0-9e42708a3a07",
        "value": "fingerknot.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:08+00:00",
        "timestamp": "1774004408",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f459aa2-d3f6-47d2-ad2c-7397c8ede0a8",
        "value": "flockflesh.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:08+00:00",
        "timestamp": "1774004408",
        "to_ids": true,
        "type": "domain",
        "uuid": "e40c28e6-f8a3-4d77-bc59-45250cf5c601",
        "value": "frogtiger.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:08+00:00",
        "timestamp": "1774004408",
        "to_ids": true,
        "type": "domain",
        "uuid": "e812c5c8-8fea-4be1-8a95-7c997e728e7f",
        "value": "goldachiever.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:08+00:00",
        "timestamp": "1774004408",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7f2850c-6ab8-4615-b4e5-36e59da9d168",
        "value": "hairlace.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:08+00:00",
        "timestamp": "1774004408",
        "to_ids": true,
        "type": "domain",
        "uuid": "03745d86-6609-4224-87db-323e345b40cf",
        "value": "hillcelery.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:08+00:00",
        "timestamp": "1774004409",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0e49798-bace-4db4-ab4f-b3f63f3a9c81",
        "value": "icebushes.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:09+00:00",
        "timestamp": "1774004409",
        "to_ids": true,
        "type": "domain",
        "uuid": "82dda82f-3d4b-4b07-9a81-035afd0ba319",
        "value": "insurancemorning.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:09+00:00",
        "timestamp": "1774004409",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b80b147-2315-4728-a7d1-50298fc70fe8",
        "value": "jellyfishpan.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:09+00:00",
        "timestamp": "1774004409",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7b9475b-55cc-41c9-8cfc-a8980572eda5",
        "value": "jellyfishweight.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:09+00:00",
        "timestamp": "1774004409",
        "to_ids": true,
        "type": "domain",
        "uuid": "406dd331-6de6-485c-9c59-632118cb91be",
        "value": "knifesea.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:09+00:00",
        "timestamp": "1774004409",
        "to_ids": true,
        "type": "domain",
        "uuid": "6491f6a5-d746-45dd-86ad-7c2b82261bfa",
        "value": "languagetreatment.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:09+00:00",
        "timestamp": "1774004409",
        "to_ids": true,
        "type": "domain",
        "uuid": "88f80c06-c660-460b-98d7-edff47cb2eed",
        "value": "lowdiscussion.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:09+00:00",
        "timestamp": "1774004410",
        "to_ids": true,
        "type": "domain",
        "uuid": "16ce9a3b-7f22-4287-b513-41e033d131c6",
        "value": "matchcabbage.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:10+00:00",
        "timestamp": "1774004410",
        "to_ids": true,
        "type": "domain",
        "uuid": "7642b9c1-6f1a-4a0f-974d-c01f3c7c74cf",
        "value": "mineicicle.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:10+00:00",
        "timestamp": "1774004410",
        "to_ids": true,
        "type": "domain",
        "uuid": "4eeb02d2-8513-47d1-a120-a18b761b83f7",
        "value": "moonfang.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:10+00:00",
        "timestamp": "1774004410",
        "to_ids": true,
        "type": "domain",
        "uuid": "cff9d1b9-7d3f-433e-8041-3b869cab55ea",
        "value": "peacedaughter.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:10+00:00",
        "timestamp": "1774004410",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3b222dd-5bb8-40e6-877f-c57e270a7f4c",
        "value": "plantsstove.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:10+00:00",
        "timestamp": "1774004410",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ced6ed0-5848-4f28-8b12-828bd164f878",
        "value": "plasticjoin.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:10+00:00",
        "timestamp": "1774004411",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e8529a6-9f21-4ae7-943c-7170f018c9b2",
        "value": "religionrose.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:11+00:00",
        "timestamp": "1774004411",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ab8f80a-016d-4925-9089-dea60ea7c839",
        "value": "roadtrousers.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:11+00:00",
        "timestamp": "1774004411",
        "to_ids": true,
        "type": "domain",
        "uuid": "599ed727-5f7a-4b1c-97a2-6f9a31b0bf71",
        "value": "robinbeginner.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:11+00:00",
        "timestamp": "1774004411",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d600f2b-666e-492a-82c2-974f6cee3ad9",
        "value": "scaleturn.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:11+00:00",
        "timestamp": "1774004411",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2c4e3e9-353f-4b04-9d31-477e217742ce",
        "value": "servantcrack.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:11+00:00",
        "timestamp": "1774004411",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcbf583f-89b1-4947-a7e2-db36f3c4e185",
        "value": "shoesmom.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:11+00:00",
        "timestamp": "1774004411",
        "to_ids": true,
        "type": "domain",
        "uuid": "9935c84d-4c65-4a79-af43-282f93e9bd1b",
        "value": "sisterssquare.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:11+00:00",
        "timestamp": "1774004412",
        "to_ids": true,
        "type": "domain",
        "uuid": "a81f7ee1-f224-409d-8c15-d67df9543a1a",
        "value": "skateoatmeal.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:12+00:00",
        "timestamp": "1774004412",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba96dd30-7e50-4900-a2f0-cb97b2554c46",
        "value": "sleephouses.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:12+00:00",
        "timestamp": "1774004412",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b323b48-cbe6-4137-b118-6ed09d8690bc",
        "value": "snakecrack.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:12+00:00",
        "timestamp": "1774004412",
        "to_ids": true,
        "type": "domain",
        "uuid": "22ae99e3-a20e-4b06-b55c-c09c969a0cfc",
        "value": "stickworm.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:12+00:00",
        "timestamp": "1774004412",
        "to_ids": true,
        "type": "domain",
        "uuid": "52edce47-2dac-4154-ba1e-945f70cbf31b",
        "value": "structuredetail.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:12+00:00",
        "timestamp": "1774004412",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3e55e79-adc8-49c7-9bbb-09d968b1bea0",
        "value": "teachingsound.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:12+00:00",
        "timestamp": "1774004413",
        "to_ids": true,
        "type": "domain",
        "uuid": "0443b9e1-a332-4bf5-ad14-5c5031409ce2",
        "value": "tentcap.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:13+00:00",
        "timestamp": "1774004413",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac989aa5-b52f-4e2d-a9e8-3fd5328babaa",
        "value": "thingcough.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:13+00:00",
        "timestamp": "1774004413",
        "to_ids": true,
        "type": "domain",
        "uuid": "6046ec9d-850f-4030-ade9-c8e45f919d7d",
        "value": "thingsidea.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:13+00:00",
        "timestamp": "1774004413",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a3f4f66-99a4-4309-8532-947e7f72c3b6",
        "value": "tinlinen.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:13+00:00",
        "timestamp": "1774004413",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fbf97f1-05ee-4ba6-b0bb-c21d1228d60f",
        "value": "versedecision.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:13+00:00",
        "timestamp": "1774004413",
        "to_ids": true,
        "type": "domain",
        "uuid": "b79f64d6-a337-4209-acb1-e3b8639e7aa7",
        "value": "winereceipt.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:13+00:00",
        "timestamp": "1774004413",
        "to_ids": true,
        "type": "domain",
        "uuid": "427535bd-375b-4cd3-aeda-1e81eb5904d9",
        "value": "wirevegetable.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:13+00:00",
        "timestamp": "1774004414",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cbb1fbe-9630-4796-9788-7fda45baae1b",
        "value": "wishname.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:14+00:00",
        "timestamp": "1774004414",
        "to_ids": false,
        "type": "url",
        "uuid": "f9cda2c5-cfb2-4198-8924-d0f7987ec673",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/30aba8a77e711e9cd4bef90e3af6cea2c822d2f4",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:14+00:00",
        "timestamp": "1774004414",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f1b5523-e788-46fc-96dd-fb9f56ce1f62",
        "value": "accountwhistle.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:14+00:00",
        "timestamp": "1774004414",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc997bb9-dd5e-40df-ad89-8f95215629d7",
        "value": "additionairport.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:14+00:00",
        "timestamp": "1774004414",
        "to_ids": true,
        "type": "domain",
        "uuid": "093b17ae-c002-42a6-82c7-5b0ce5c0e572",
        "value": "additionpicture.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:14+00:00",
        "timestamp": "1774004414",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8d4cc31-0873-42f3-ba74-be8f24874faf",
        "value": "aftermathbushes.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:14+00:00",
        "timestamp": "1774004415",
        "to_ids": true,
        "type": "domain",
        "uuid": "de795828-05bf-4f67-bce9-d0451a1474a9",
        "value": "appliancehorses.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:15+00:00",
        "timestamp": "1774004415",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f069138-1906-4f68-864c-5977b9350532",
        "value": "arithmeticvest.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:15+00:00",
        "timestamp": "1774004415",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ab3d73c-412f-4819-ad99-8586e0e84129",
        "value": "armlamp.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:15+00:00",
        "timestamp": "1774004415",
        "to_ids": true,
        "type": "domain",
        "uuid": "e42e7dee-fd18-4c8e-8521-a13518d22726",
        "value": "armytreatment.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:15+00:00",
        "timestamp": "1774004415",
        "to_ids": true,
        "type": "domain",
        "uuid": "efe34ece-5599-49c6-8fdc-25b28a217d1b",
        "value": "battlesummer.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:15+00:00",
        "timestamp": "1774004415",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b8dd4d9-556c-4980-be57-e70e2f559cf7",
        "value": "bedtub.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:15+00:00",
        "timestamp": "1774004415",
        "to_ids": true,
        "type": "domain",
        "uuid": "18124c98-a07c-4984-b78c-1bd5015bac8b",
        "value": "beecalendar.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:15+00:00",
        "timestamp": "1774004416",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec7b2ecc-c88c-41b7-b929-c2fb518f5b32",
        "value": "beginnercreator.bond",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:16+00:00",
        "timestamp": "1774004416",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcc5ae2d-c086-4117-8b3f-e78a67ab7816",
        "value": "behaviorcloth.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:16+00:00",
        "timestamp": "1774004416",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb554e2c-13f0-4c3f-bd62-745c17278828",
        "value": "birthdaymagic.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:16+00:00",
        "timestamp": "1774004416",
        "to_ids": true,
        "type": "domain",
        "uuid": "8753a3c0-a250-49c7-aef9-d3400c4253a3",
        "value": "bloodguide.bond",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:16+00:00",
        "timestamp": "1774004416",
        "to_ids": true,
        "type": "domain",
        "uuid": "288f1cf6-5303-4e09-95dd-8ab10cf7da73",
        "value": "bookserror.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:16+00:00",
        "timestamp": "1774004416",
        "to_ids": true,
        "type": "domain",
        "uuid": "61557264-3e11-4c57-9853-c96d2abd4074",
        "value": "bottlebite.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:16+00:00",
        "timestamp": "1774004417",
        "to_ids": true,
        "type": "domain",
        "uuid": "21f400ef-5be5-4248-a854-c395ad6b6d0d",
        "value": "brotherdinner.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:17+00:00",
        "timestamp": "1774004417",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cf94d4a-c008-4a8b-b7dc-110b9e0c0bd1",
        "value": "brotherpopcorn.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:17+00:00",
        "timestamp": "1774004417",
        "to_ids": true,
        "type": "domain",
        "uuid": "c86d6aba-4416-4bb6-afc0-64bb4739e1f9",
        "value": "brotherreligion.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:17+00:00",
        "timestamp": "1774004417",
        "to_ids": true,
        "type": "domain",
        "uuid": "42e37080-60dc-405c-b671-4554da062f08",
        "value": "buildingsuggestion.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:17+00:00",
        "timestamp": "1774004417",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d0c5466-c60c-4cc6-8682-0f425f6bffaf",
        "value": "bushesbelieve.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:17+00:00",
        "timestamp": "1774004417",
        "to_ids": true,
        "type": "domain",
        "uuid": "0389a519-48f0-4912-a46b-ee38534be927",
        "value": "canvaspart.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:17+00:00",
        "timestamp": "1774004417",
        "to_ids": true,
        "type": "domain",
        "uuid": "079cdfbc-6ded-417b-b0e9-d4eedf9fe2ca",
        "value": "capbuilding.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:17+00:00",
        "timestamp": "1774004418",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ce573c0-4fca-4f96-9cc0-1457149948f9",
        "value": "carjellyfish.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:18+00:00",
        "timestamp": "1774004418",
        "to_ids": true,
        "type": "domain",
        "uuid": "cacc2516-d68a-4ba3-8a57-5df26a26be4a",
        "value": "catbikes.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:18+00:00",
        "timestamp": "1774004418",
        "to_ids": true,
        "type": "domain",
        "uuid": "50d970be-20bb-4cf2-ad4c-68e9981768dd",
        "value": "chalksmell.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:18+00:00",
        "timestamp": "1774004418",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b4da364-3d5d-4f9c-8862-dfd5ce712816",
        "value": "cheesesister.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:18+00:00",
        "timestamp": "1774004418",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d8c3569-3688-46c6-b0d8-42dbe20e84dd",
        "value": "chickenslevel.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:18+00:00",
        "timestamp": "1774004418",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e978c54-ce2e-4e3e-b4b6-313ebbafc5bd",
        "value": "coatberry.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:18+00:00",
        "timestamp": "1774004419",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb3bdfc1-b6bb-4d6e-9b2c-b741a25365a1",
        "value": "cobwebpeace.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:19+00:00",
        "timestamp": "1774004419",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d4dd41b-288b-4f60-abd4-a89bd2320e97",
        "value": "conditiondeath.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:19+00:00",
        "timestamp": "1774004419",
        "to_ids": true,
        "type": "domain",
        "uuid": "772e8d08-1b0b-41bc-b40a-81d54d140b04",
        "value": "coughcoal.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:19+00:00",
        "timestamp": "1774004419",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5dc7c7a-b0cc-438e-80e4-19b3b3a5d9b2",
        "value": "coveridea.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:19+00:00",
        "timestamp": "1774004419",
        "to_ids": true,
        "type": "domain",
        "uuid": "37009dbc-9462-4ca7-9008-20ac806def24",
        "value": "cowsvessel.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:19+00:00",
        "timestamp": "1774004419",
        "to_ids": true,
        "type": "domain",
        "uuid": "33b20ca0-059e-424c-a664-a6be965f0c26",
        "value": "crackfood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:19+00:00",
        "timestamp": "1774004419",
        "to_ids": true,
        "type": "domain",
        "uuid": "07311c0f-8dfd-4dcf-9b0f-c29ef9c5d9c6",
        "value": "creatoreggs.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:19+00:00",
        "timestamp": "1774004420",
        "to_ids": true,
        "type": "domain",
        "uuid": "5926772d-cde0-4de8-8ca4-48b2758c1539",
        "value": "cubaction.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:20+00:00",
        "timestamp": "1774004420",
        "to_ids": true,
        "type": "domain",
        "uuid": "217a741d-04a9-4eff-9106-0f1074d2c46a",
        "value": "cupindustry.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:20+00:00",
        "timestamp": "1774004420",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c8d36e5-969c-472c-ad49-c05c99bbb3d1",
        "value": "detailcrowd.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:20+00:00",
        "timestamp": "1774004420",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2b0f696-3143-4173-b7b4-df610a6aaf11",
        "value": "dinnerfruit.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:20+00:00",
        "timestamp": "1774004420",
        "to_ids": true,
        "type": "domain",
        "uuid": "e136443f-0c1d-451d-81e8-f8202ae29c3e",
        "value": "dinosaursjam.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:20+00:00",
        "timestamp": "1774004420",
        "to_ids": true,
        "type": "domain",
        "uuid": "96b89f0c-6a7f-450b-904c-454efec707f4",
        "value": "discoverystew.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:20+00:00",
        "timestamp": "1774004420",
        "to_ids": true,
        "type": "domain",
        "uuid": "48a1fc0f-53b4-4c84-a6b1-bba429bd5bab",
        "value": "discussionrespect.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:20+00:00",
        "timestamp": "1774004421",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a8bb291-f36b-4184-a1ba-233d99bfd5b8",
        "value": "distancestream.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:21+00:00",
        "timestamp": "1774004421",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4ffea45-1d2e-4ecb-962c-18d4efe7be54",
        "value": "doctormoon.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:21+00:00",
        "timestamp": "1774004421",
        "to_ids": true,
        "type": "domain",
        "uuid": "89c69c95-3cd6-445c-a5fd-6f52dddc2e05",
        "value": "downtownisland.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:21+00:00",
        "timestamp": "1774004421",
        "to_ids": true,
        "type": "domain",
        "uuid": "049e2a78-b21f-4aa2-97f4-ed22031cc5e1",
        "value": "earthquaketemper.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:21+00:00",
        "timestamp": "1774004421",
        "to_ids": true,
        "type": "domain",
        "uuid": "85560e4e-622c-4d18-b03a-6ef670fbbeb3",
        "value": "earthroute.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:21+00:00",
        "timestamp": "1774004421",
        "to_ids": true,
        "type": "domain",
        "uuid": "386ebeca-b519-428e-95a1-4e1f80108bc5",
        "value": "educationrhythm.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:21+00:00",
        "timestamp": "1774004422",
        "to_ids": true,
        "type": "domain",
        "uuid": "76f38a5a-5a77-4295-84f3-72250fae9285",
        "value": "eggisland.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:22+00:00",
        "timestamp": "1774004422",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f983617-2ed2-44ea-b1e9-6cac3fde4cd4",
        "value": "eggsong.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:22+00:00",
        "timestamp": "1774004422",
        "to_ids": true,
        "type": "domain",
        "uuid": "0be8ee66-f94f-4282-ade1-fbcf792beac9",
        "value": "eggteam.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:22+00:00",
        "timestamp": "1774004422",
        "to_ids": true,
        "type": "domain",
        "uuid": "130b17e5-e14d-45b9-94f9-750f846c640e",
        "value": "exampleporter.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:22+00:00",
        "timestamp": "1774004422",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7f36ecc-3993-40f7-b439-58e403fc2997",
        "value": "factisland.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:22+00:00",
        "timestamp": "1774004422",
        "to_ids": true,
        "type": "domain",
        "uuid": "227f04aa-8343-4755-9430-e63807c9d029",
        "value": "fangvessel.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:22+00:00",
        "timestamp": "1774004423",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ca4f9b1-06e4-413c-84e5-a9f1efe4cef5",
        "value": "farmfang.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:23+00:00",
        "timestamp": "1774004423",
        "to_ids": true,
        "type": "domain",
        "uuid": "17116846-5fc6-40f3-90cb-843e5baa31ea",
        "value": "fingervessel.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:23+00:00",
        "timestamp": "1774004423",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c5d17c8-ddf1-4621-b2b9-e2361ac377ab",
        "value": "flowersmotion.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:23+00:00",
        "timestamp": "1774004423",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dfcadf0-1b08-4a99-8424-3168acd1973c",
        "value": "fogbell.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:23+00:00",
        "timestamp": "1774004423",
        "to_ids": true,
        "type": "domain",
        "uuid": "806f09cf-b0e0-44d5-9daa-0a57ccc9cc8c",
        "value": "foldregret.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:23+00:00",
        "timestamp": "1774004423",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fff0f9e-435b-4f61-be7e-512c0bdc41c8",
        "value": "foodpear.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:23+00:00",
        "timestamp": "1774004423",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b1283f9-fee8-4384-be48-35fe8d025fa4",
        "value": "foodrock.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:23+00:00",
        "timestamp": "1774004424",
        "to_ids": true,
        "type": "domain",
        "uuid": "2763ba3c-00ee-425b-af50-ebc7eb3bd556",
        "value": "footstraw.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:24+00:00",
        "timestamp": "1774004424",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0afd0f4-8e7e-41e7-80b7-33d505953e86",
        "value": "forkcast.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:24+00:00",
        "timestamp": "1774004424",
        "to_ids": true,
        "type": "domain",
        "uuid": "4791373d-700c-42c0-b1d4-b4fd924e6662",
        "value": "forkyard.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:24+00:00",
        "timestamp": "1774004424",
        "to_ids": true,
        "type": "domain",
        "uuid": "0836181d-e182-4b52-af91-ba35b797440d",
        "value": "frogssuit.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:24+00:00",
        "timestamp": "1774004424",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4ee5175-fbda-452d-aa8e-b75bd2da0c3c",
        "value": "geesestick.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:24+00:00",
        "timestamp": "1774004424",
        "to_ids": true,
        "type": "domain",
        "uuid": "62e19dcb-688b-4b7f-8303-00d0921b29e1",
        "value": "girlsgrain.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:24+00:00",
        "timestamp": "1774004424",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca78dd56-f722-42af-8863-eea3cfb0a40b",
        "value": "goldvein.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:25+00:00",
        "timestamp": "1774004425",
        "to_ids": true,
        "type": "domain",
        "uuid": "d83389de-068a-4619-bc4e-41203c14eb1d",
        "value": "gripsoap.bond",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:25+00:00",
        "timestamp": "1774004425",
        "to_ids": true,
        "type": "domain",
        "uuid": "c32d278b-f533-4cf5-b18e-29d8cbf2385f",
        "value": "guitarcars.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:25+00:00",
        "timestamp": "1774004425",
        "to_ids": true,
        "type": "domain",
        "uuid": "056296b5-79fc-4188-a9c5-d71fc8e77640",
        "value": "handsaddition.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:25+00:00",
        "timestamp": "1774004425",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7065f60-852f-427b-99ec-37b01581bd8a",
        "value": "hobbiesyard.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:25+00:00",
        "timestamp": "1774004425",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d2cc87f-123d-4772-819d-2d86516da16a",
        "value": "honeyshirt.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:25+00:00",
        "timestamp": "1774004425",
        "to_ids": true,
        "type": "domain",
        "uuid": "81b4101f-5857-4300-8135-5980bbbf37f5",
        "value": "horsesmark.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:25+00:00",
        "timestamp": "1774004426",
        "to_ids": true,
        "type": "domain",
        "uuid": "96d8588d-a1af-4fb0-ac46-e34069da0b7a",
        "value": "housesice.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:26+00:00",
        "timestamp": "1774004426",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d5e9cda-e087-49d0-9125-effc9abc4989",
        "value": "hydrantice.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:26+00:00",
        "timestamp": "1774004426",
        "to_ids": true,
        "type": "domain",
        "uuid": "dae53949-5e51-4515-af92-cd5b7222a60d",
        "value": "iciclewine.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:26+00:00",
        "timestamp": "1774004426",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cce4ee2-7ea6-455a-a5cd-ce7aacaacf26",
        "value": "impulseice.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:26+00:00",
        "timestamp": "1774004426",
        "to_ids": true,
        "type": "domain",
        "uuid": "234317b7-4c51-47fa-9772-936ed9586fa4",
        "value": "jeweltemper.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:26+00:00",
        "timestamp": "1774004426",
        "to_ids": true,
        "type": "domain",
        "uuid": "1634749f-e2a7-4eec-9d6d-a7d8abddf64c",
        "value": "keywash.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:26+00:00",
        "timestamp": "1774004426",
        "to_ids": true,
        "type": "domain",
        "uuid": "c02243d9-5e81-4c59-aead-e14848156f25",
        "value": "kissfinger.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:27+00:00",
        "timestamp": "1774004427",
        "to_ids": true,
        "type": "domain",
        "uuid": "98e4fd98-779d-4353-85e9-e22d4c1cfefe",
        "value": "legseat.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:27+00:00",
        "timestamp": "1774004427",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb0abe74-b457-4ea3-811d-845d63e85d2f",
        "value": "legsslave.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:27+00:00",
        "timestamp": "1774004427",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ab8bc43-87d7-4fde-b9ff-0fdf5e5d0e2b",
        "value": "letterspoon.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:27+00:00",
        "timestamp": "1774004427",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f42b810-1f9d-44f3-8f05-f475dd6fd024",
        "value": "lockbridge.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:27+00:00",
        "timestamp": "1774004427",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d45f330-4b1d-4182-9d3f-676f8694fe30",
        "value": "lockshape.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:27+00:00",
        "timestamp": "1774004427",
        "to_ids": true,
        "type": "domain",
        "uuid": "75dcdbab-e768-4aa7-8aab-2370cadba295",
        "value": "losstwig.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:27+00:00",
        "timestamp": "1774004428",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd19c9b6-0d47-45e5-95ac-4a309f5c59fc",
        "value": "lumbercountry.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:28+00:00",
        "timestamp": "1774004428",
        "to_ids": true,
        "type": "domain",
        "uuid": "847c62a6-b9bd-4bcd-8cac-4592cf9efec6",
        "value": "meatriddle.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:28+00:00",
        "timestamp": "1774004428",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bf0f468-a30a-4e0a-88c1-7b7251ba548f",
        "value": "memoryproperty.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:28+00:00",
        "timestamp": "1774004428",
        "to_ids": true,
        "type": "domain",
        "uuid": "21207bc8-a376-48a7-81f4-ead15137165f",
        "value": "ministervase.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:28+00:00",
        "timestamp": "1774004428",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e9a62ed-2b21-4c35-9f52-b51fbc5abcf0",
        "value": "mintink.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:28+00:00",
        "timestamp": "1774004428",
        "to_ids": true,
        "type": "domain",
        "uuid": "03ecf205-1aa3-47f5-bb6b-a488aa1ca87d",
        "value": "mintvase.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:28+00:00",
        "timestamp": "1774004428",
        "to_ids": true,
        "type": "domain",
        "uuid": "07941be2-26f3-473f-b790-6cf9ea6c0a9a",
        "value": "monkeyactor.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:29+00:00",
        "timestamp": "1774004429",
        "to_ids": true,
        "type": "domain",
        "uuid": "50d3dc00-fdbb-4614-bcf0-b1be950d7b34",
        "value": "monkeyagreement.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:29+00:00",
        "timestamp": "1774004429",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd215347-b2b0-4db0-9b47-160ed66b3224",
        "value": "monthmeasure.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:29+00:00",
        "timestamp": "1774004429",
        "to_ids": true,
        "type": "domain",
        "uuid": "e62ed9d9-30d6-4945-994f-050d13625ae2",
        "value": "nightcopper.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:29+00:00",
        "timestamp": "1774004429",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6c9dd20-b295-479f-b921-d405aa974ac8",
        "value": "noseglove.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:29+00:00",
        "timestamp": "1774004429",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c3c98bb-d1a0-43b4-b911-1fda1f5f53fa",
        "value": "nutrabbits.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:29+00:00",
        "timestamp": "1774004429",
        "to_ids": true,
        "type": "domain",
        "uuid": "d94a0a62-1b61-4ac9-b86c-d50e5ea4b855",
        "value": "observationcows.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:29+00:00",
        "timestamp": "1774004430",
        "to_ids": true,
        "type": "domain",
        "uuid": "347c88af-cfb7-4f01-9d25-54e3471bc8d0",
        "value": "pantruck.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:30+00:00",
        "timestamp": "1774004430",
        "to_ids": true,
        "type": "domain",
        "uuid": "b96fd4a4-655e-4feb-a64e-0295ba679e0a",
        "value": "partiron.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:30+00:00",
        "timestamp": "1774004430",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7abc5ed-eefc-487c-8870-4b062b26dbba",
        "value": "partjar.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:30+00:00",
        "timestamp": "1774004430",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d492530-7817-4004-8876-4437b1ce5b3e",
        "value": "personfriend.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:30+00:00",
        "timestamp": "1774004430",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e76e881-7345-42fc-a349-c4872c9e25ab",
        "value": "persongiants.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:30+00:00",
        "timestamp": "1774004430",
        "to_ids": true,
        "type": "domain",
        "uuid": "82990fc2-65c1-423e-a7e2-406833ff0abd",
        "value": "picklebelieve.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:30+00:00",
        "timestamp": "1774004430",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae545af9-7455-49aa-99de-ffa47d8d000b",
        "value": "pieplant.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:30+00:00",
        "timestamp": "1774004431",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7976627-3b11-437d-8d98-52ab9f98c2db",
        "value": "pinwool.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:31+00:00",
        "timestamp": "1774004431",
        "to_ids": true,
        "type": "domain",
        "uuid": "e233e0b1-cfd7-4bae-960d-53eb8dc9028f",
        "value": "pizzasvest.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:31+00:00",
        "timestamp": "1774004431",
        "to_ids": true,
        "type": "domain",
        "uuid": "c98d3b96-6932-4d1d-8fb3-c0780dfa89f5",
        "value": "placegold.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:31+00:00",
        "timestamp": "1774004431",
        "to_ids": true,
        "type": "domain",
        "uuid": "92856025-9239-4299-a6b4-73d157f1da32",
        "value": "placespoon.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:31+00:00",
        "timestamp": "1774004431",
        "to_ids": true,
        "type": "domain",
        "uuid": "44c71ff7-e319-4948-a9b1-fe1530ccc921",
        "value": "plantsleep.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:31+00:00",
        "timestamp": "1774004431",
        "to_ids": true,
        "type": "domain",
        "uuid": "c534ccfc-94f1-4be9-8505-4706900a0ae5",
        "value": "plantswaves.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:31+00:00",
        "timestamp": "1774004432",
        "to_ids": true,
        "type": "domain",
        "uuid": "04a3b1e1-b441-4c29-a3cb-b8135007ccef",
        "value": "punishmentcar.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:32+00:00",
        "timestamp": "1774004432",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b8ede45-7411-4c65-9188-2ebcefcff78c",
        "value": "pushminister.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:32+00:00",
        "timestamp": "1774004432",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4df9619-259f-4251-acc6-967f4c9bf1c7",
        "value": "quarterweather.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:32+00:00",
        "timestamp": "1774004432",
        "to_ids": true,
        "type": "domain",
        "uuid": "b75a833b-a47e-4ba5-aa56-3d990594dc67",
        "value": "quietbabies.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:32+00:00",
        "timestamp": "1774004432",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f6aca9b-199d-40f1-9b1f-18176802494a",
        "value": "quilljoin.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:32+00:00",
        "timestamp": "1774004432",
        "to_ids": true,
        "type": "domain",
        "uuid": "92dfd3ab-2b53-498c-b284-6977c4667c98",
        "value": "railpail.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:32+00:00",
        "timestamp": "1774004433",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cbaaf1d-118d-407d-b523-6e585d4bc043",
        "value": "raterake.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:33+00:00",
        "timestamp": "1774004433",
        "to_ids": true,
        "type": "domain",
        "uuid": "b90ae0ed-d997-4bef-9367-9d96195391bf",
        "value": "readingcushion.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:33+00:00",
        "timestamp": "1774004433",
        "to_ids": true,
        "type": "domain",
        "uuid": "c807fdd2-bc37-471c-ab30-48809287a963",
        "value": "reasonshoe.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:33+00:00",
        "timestamp": "1774004433",
        "to_ids": true,
        "type": "domain",
        "uuid": "39e02f2d-d61c-472d-813a-906f5e09a597",
        "value": "requestthroat.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:33+00:00",
        "timestamp": "1774004433",
        "to_ids": true,
        "type": "domain",
        "uuid": "b73dbf4c-7e99-4694-ae01-1f26d43c1995",
        "value": "rewardbuilding.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:33+00:00",
        "timestamp": "1774004433",
        "to_ids": true,
        "type": "domain",
        "uuid": "51061df3-2f7e-4335-9257-6a86b2b70da8",
        "value": "rhythmsand.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:33+00:00",
        "timestamp": "1774004433",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d964c23-0f0b-41db-bf5c-cc4b9a4dc6bf",
        "value": "ricedonkey.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:33+00:00",
        "timestamp": "1774004434",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee06b221-540f-4f47-8274-f5290d7f87b9",
        "value": "rollsleet.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:34+00:00",
        "timestamp": "1774004434",
        "to_ids": true,
        "type": "domain",
        "uuid": "685ec917-e758-406b-a03c-2810348a5b45",
        "value": "roofcakes.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:34+00:00",
        "timestamp": "1774004434",
        "to_ids": true,
        "type": "domain",
        "uuid": "b67c3836-bb50-404b-9602-9799f0687694",
        "value": "roomafterthought.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:34+00:00",
        "timestamp": "1774004434",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8e085fd-485d-4dbb-8a75-0758a909ca9e",
        "value": "roomplot.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:34+00:00",
        "timestamp": "1774004434",
        "to_ids": true,
        "type": "domain",
        "uuid": "57b29155-d00d-4b4b-9d78-2f2b42dfb064",
        "value": "rootsystem.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:34+00:00",
        "timestamp": "1774004434",
        "to_ids": true,
        "type": "domain",
        "uuid": "502ff2d0-2f77-4762-9d6d-6a359ee78878",
        "value": "scalevest.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:34+00:00",
        "timestamp": "1774004435",
        "to_ids": true,
        "type": "domain",
        "uuid": "764ba7f0-f694-41c1-90f0-72d1d5cbb49d",
        "value": "scarecrowdog.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:35+00:00",
        "timestamp": "1774004435",
        "to_ids": true,
        "type": "domain",
        "uuid": "8292717e-208d-40fa-b836-0a58c031cf13",
        "value": "scissorsground.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:35+00:00",
        "timestamp": "1774004435",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8b6d49a-eb7d-46a8-8b86-5c9d8d524811",
        "value": "selectionscarecrow.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:35+00:00",
        "timestamp": "1774004435",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dc941c8-5a80-4ceb-8abb-c6dd4e1f97f5",
        "value": "selectionword.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:35+00:00",
        "timestamp": "1774004435",
        "to_ids": true,
        "type": "domain",
        "uuid": "918e155b-d515-4434-8150-bb72091cc8e9",
        "value": "shapeboot.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:35+00:00",
        "timestamp": "1774004435",
        "to_ids": true,
        "type": "domain",
        "uuid": "2847b06d-9ce5-453b-bcda-e6971470f202",
        "value": "sheetmen.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:35+00:00",
        "timestamp": "1774004435",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae31db36-690b-4e66-ad26-1b549098226f",
        "value": "sheetmorning.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:36+00:00",
        "timestamp": "1774004436",
        "to_ids": true,
        "type": "domain",
        "uuid": "1107fdb0-af85-44a6-a7fa-0628b0a8aae8",
        "value": "shelfswim.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:36+00:00",
        "timestamp": "1774004436",
        "to_ids": true,
        "type": "domain",
        "uuid": "720bf10c-a96d-49a4-bbbf-066fe688782b",
        "value": "shiptank.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:36+00:00",
        "timestamp": "1774004436",
        "to_ids": true,
        "type": "domain",
        "uuid": "d50918fc-93a8-427f-8844-568058852857",
        "value": "shirtshirt.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:36+00:00",
        "timestamp": "1774004436",
        "to_ids": true,
        "type": "domain",
        "uuid": "cae27312-9c2c-4f72-9145-ceb5cd0e78f4",
        "value": "shoestop.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:36+00:00",
        "timestamp": "1774004436",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4073899-514f-4fb2-97c0-3a9119d90d66",
        "value": "silkice.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:36+00:00",
        "timestamp": "1774004436",
        "to_ids": true,
        "type": "domain",
        "uuid": "98b97cf6-ea16-4f4c-a828-cfc2ddc6d480",
        "value": "silverstore.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:37+00:00",
        "timestamp": "1774004437",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddf31a8d-3396-40d1-8028-3caaac90da6a",
        "value": "sistertable.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:37+00:00",
        "timestamp": "1774004437",
        "to_ids": true,
        "type": "domain",
        "uuid": "683d849d-cc1a-4861-8d6b-beceeb09f548",
        "value": "sisterwood.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:37+00:00",
        "timestamp": "1774004437",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d83fcf8-a51b-4ae9-b3d1-f72b7e0df942",
        "value": "skycellar.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:37+00:00",
        "timestamp": "1774004437",
        "to_ids": true,
        "type": "domain",
        "uuid": "13765aab-bdce-45e8-9292-c79dbc998a1d",
        "value": "sleepglove.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:37+00:00",
        "timestamp": "1774004437",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5627048-592d-4f58-97cd-8cf5471e2531",
        "value": "sleetpotato.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:37+00:00",
        "timestamp": "1774004437",
        "to_ids": true,
        "type": "domain",
        "uuid": "61903c3a-02b4-4242-a049-e0c68c117d16",
        "value": "snailsdoor.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:37+00:00",
        "timestamp": "1774004438",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae3ce547-ba9a-4185-b759-9c2efe15b59e",
        "value": "sofacent.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:38+00:00",
        "timestamp": "1774004438",
        "to_ids": true,
        "type": "domain",
        "uuid": "63bb08f2-e3f3-435f-92ab-e8c33ba8f60a",
        "value": "songrest.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:38+00:00",
        "timestamp": "1774004438",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bfc420c-6f43-4a16-95f1-88f954b0c78a",
        "value": "sonmuscle.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:38+00:00",
        "timestamp": "1774004438",
        "to_ids": true,
        "type": "domain",
        "uuid": "2faf15d5-514e-4a7a-acc9-b8da10824975",
        "value": "spaderock.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:38+00:00",
        "timestamp": "1774004438",
        "to_ids": true,
        "type": "domain",
        "uuid": "93af09da-9a07-4d0d-b794-f6e21254152c",
        "value": "spoonarch.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:38+00:00",
        "timestamp": "1774004438",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae83778d-c149-4512-9612-40fec6ca19c5",
        "value": "spotfinger.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:38+00:00",
        "timestamp": "1774004438",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5731c9a-e28d-4da3-9bb9-1ff14ad069fe",
        "value": "spybaseball.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:39+00:00",
        "timestamp": "1774004439",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8019461-0f52-41de-93aa-e2b60a8d9182",
        "value": "squirrelsisters.hair",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:39+00:00",
        "timestamp": "1774004439",
        "to_ids": true,
        "type": "domain",
        "uuid": "26838fe4-02ca-4097-bbed-d8afb9ca56fd",
        "value": "stemstop.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:39+00:00",
        "timestamp": "1774004439",
        "to_ids": true,
        "type": "domain",
        "uuid": "f298bfcb-5059-462b-b694-c032913f0e56",
        "value": "stewframe.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:39+00:00",
        "timestamp": "1774004439",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d057b02-3dec-40e6-a162-50ab761366a8",
        "value": "sticksrun.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:39+00:00",
        "timestamp": "1774004439",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff8e00f7-5332-4615-a868-28782f9f3366",
        "value": "stitchtransport.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:39+00:00",
        "timestamp": "1774004439",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b5415a9-62eb-44ce-b918-b7d28a606640",
        "value": "stopcanvas.art",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:39+00:00",
        "timestamp": "1774004440",
        "to_ids": true,
        "type": "domain",
        "uuid": "13e3626d-26bf-4b39-9020-68409e98c4c9",
        "value": "storedriving.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:40+00:00",
        "timestamp": "1774004440",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5f44502-b0ed-40fe-96c0-48eb61c975ce",
        "value": "structuresuggestion.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:40+00:00",
        "timestamp": "1774004440",
        "to_ids": true,
        "type": "domain",
        "uuid": "b378f19e-e0d6-4264-8f84-da7c2e542d92",
        "value": "suitmemory.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:40+00:00",
        "timestamp": "1774004440",
        "to_ids": true,
        "type": "domain",
        "uuid": "e93dc338-020c-41a2-94bc-4f952765ee2c",
        "value": "summervegetable.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:40+00:00",
        "timestamp": "1774004440",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c9bf40c-b9aa-4da4-b89e-b4eb84c5265f",
        "value": "surprisegun.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:40+00:00",
        "timestamp": "1774004440",
        "to_ids": true,
        "type": "domain",
        "uuid": "011ec282-5941-4f59-9083-434ed09095e5",
        "value": "tabledestruction.hair",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:40+00:00",
        "timestamp": "1774004441",
        "to_ids": true,
        "type": "domain",
        "uuid": "947bde28-1f36-4f21-bad2-d363cc3eda65",
        "value": "tablesuggestion.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:41+00:00",
        "timestamp": "1774004441",
        "to_ids": true,
        "type": "domain",
        "uuid": "915592da-b7fb-4fe3-98e1-2fa99860f504",
        "value": "talkpull.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:41+00:00",
        "timestamp": "1774004441",
        "to_ids": true,
        "type": "domain",
        "uuid": "dff9580f-81e0-424a-8547-6b8139163c0d",
        "value": "taxjudge.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:41+00:00",
        "timestamp": "1774004441",
        "to_ids": true,
        "type": "domain",
        "uuid": "be1fca72-1f83-4ed5-afcc-50b907edc64e",
        "value": "teethglove.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:41+00:00",
        "timestamp": "1774004441",
        "to_ids": true,
        "type": "domain",
        "uuid": "41f47804-663e-4664-bcd0-5fbcf9d8e7dd",
        "value": "thrillfoot.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:41+00:00",
        "timestamp": "1774004441",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e35686f-3c0d-4c6a-8d8f-cafb496e6c04",
        "value": "throatsalt.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:41+00:00",
        "timestamp": "1774004441",
        "to_ids": true,
        "type": "domain",
        "uuid": "01040395-f974-46bc-b0a9-d2bfc4e4049d",
        "value": "toescloth.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:41+00:00",
        "timestamp": "1774004442",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9d08b76-d2ca-46c8-b943-8d30e3042d6c",
        "value": "toothgovernor.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:42+00:00",
        "timestamp": "1774004442",
        "to_ids": true,
        "type": "domain",
        "uuid": "028f4a30-3234-4e96-9e9e-bc382b4aa655",
        "value": "toothpasteheat.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:42+00:00",
        "timestamp": "1774004442",
        "to_ids": true,
        "type": "domain",
        "uuid": "62ed3cb2-c43e-458f-9da9-918101adb094",
        "value": "trainbear.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:42+00:00",
        "timestamp": "1774004442",
        "to_ids": true,
        "type": "domain",
        "uuid": "15a4b254-530f-4b04-95c6-a5e1ef2e7f61",
        "value": "trainfurniture.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:42+00:00",
        "timestamp": "1774004442",
        "to_ids": true,
        "type": "domain",
        "uuid": "92c982e7-b54a-4634-a9e4-0ed3eee5d89e",
        "value": "trainstransport.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:42+00:00",
        "timestamp": "1774004442",
        "to_ids": true,
        "type": "domain",
        "uuid": "24b06766-d827-437c-a55c-0146af99dd58",
        "value": "trampdonkey.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:42+00:00",
        "timestamp": "1774004442",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ecdf2f4-1a07-4b1c-a2e3-6d371dfbf57f",
        "value": "treatmentkettle.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:43+00:00",
        "timestamp": "1774004443",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f053ff8-66c5-40d7-8e4e-45635d5dbed1",
        "value": "umbrellaspring.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:43+00:00",
        "timestamp": "1774004443",
        "to_ids": true,
        "type": "domain",
        "uuid": "07b1f054-5039-4a9e-b1bf-50b9c93af1cd",
        "value": "unitmoon.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:43+00:00",
        "timestamp": "1774004443",
        "to_ids": true,
        "type": "domain",
        "uuid": "db745232-5db8-4215-9dcc-27998cd9fe44",
        "value": "valuescent.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:43+00:00",
        "timestamp": "1774004443",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b6b0f37-5259-49ed-80c2-d8bcf4722768",
        "value": "vanaccount.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:43+00:00",
        "timestamp": "1774004443",
        "to_ids": true,
        "type": "domain",
        "uuid": "739abfa3-b0a3-49fb-8e6f-5f5f0501641e",
        "value": "vangovernment.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:43+00:00",
        "timestamp": "1774004443",
        "to_ids": true,
        "type": "domain",
        "uuid": "88e8f547-b543-430c-8734-5dcede6c9a6b",
        "value": "vasebox.art",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:43+00:00",
        "timestamp": "1774004444",
        "to_ids": true,
        "type": "domain",
        "uuid": "4688d29d-5fb3-43e5-91e0-a0a1bb9b1ea5",
        "value": "vasesleet.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:44+00:00",
        "timestamp": "1774004444",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcbce9ea-b214-4dfa-8825-f8caf7fe7036",
        "value": "vegetableblood.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:44+00:00",
        "timestamp": "1774004444",
        "to_ids": true,
        "type": "domain",
        "uuid": "20b2f186-996d-47af-bbad-2f56fc0080f7",
        "value": "verserelation.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:44+00:00",
        "timestamp": "1774004444",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac7e0805-329f-4260-85a4-b05a7a0b1532",
        "value": "vesselchin.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:44+00:00",
        "timestamp": "1774004444",
        "to_ids": true,
        "type": "domain",
        "uuid": "ade271df-6ec3-4ef7-9554-81906c04e409",
        "value": "volleyballbranch.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:44+00:00",
        "timestamp": "1774004444",
        "to_ids": true,
        "type": "domain",
        "uuid": "96237f38-8f29-4274-b14a-64b09caafb2d",
        "value": "waxtemper.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:44+00:00",
        "timestamp": "1774004445",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd36ddaf-5e0a-4808-9746-f94144c4d70b",
        "value": "wealthperson.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:45+00:00",
        "timestamp": "1774004445",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b317049-4847-4ccb-99b7-fc0aabb64832",
        "value": "weightboundary.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:45+00:00",
        "timestamp": "1774004445",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7084d18-eda3-4694-9c76-1a0e23a88666",
        "value": "wirebutton.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:45+00:00",
        "timestamp": "1774004445",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c6e5785-765a-4011-9552-7bb093424d83",
        "value": "workhill.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:45+00:00",
        "timestamp": "1774004445",
        "to_ids": true,
        "type": "domain",
        "uuid": "71528b23-dbeb-4e68-a471-9c5499af3f13",
        "value": "yardclass.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:45+00:00",
        "timestamp": "1774004445",
        "to_ids": true,
        "type": "domain",
        "uuid": "d48abc4c-0f64-4191-abbb-3e7433e050c7",
        "value": "zephyrblow.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:45+00:00",
        "timestamp": "1774004445",
        "to_ids": true,
        "type": "domain",
        "uuid": "c02f97c5-fffd-497e-8d1a-f8ea0c167b83",
        "value": "zephyrdistribution.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:45+00:00",
        "timestamp": "1774004446",
        "to_ids": false,
        "type": "url",
        "uuid": "65510f73-0633-4f7a-99d1-de04b37e01b2",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5efcc3d0547aa12af99a129db049a1f12afc5288",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:46+00:00",
        "timestamp": "1774004446",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d84dba2-e88d-41d3-93be-2cfbaf300a51",
        "value": "harmonycontrol.club",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:46+00:00",
        "timestamp": "1774004446",
        "to_ids": false,
        "type": "url",
        "uuid": "8d5f494f-213b-429d-bd7e-9862774aa62f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/70280d37a479de1a7f15985499a08677289d6da7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:46+00:00",
        "timestamp": "1774004446",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4c40b23-71c6-49ca-b547-e7cf358968ed",
        "value": "afterthoughtliquid.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:46+00:00",
        "timestamp": "1774004446",
        "to_ids": true,
        "type": "domain",
        "uuid": "80f6cc0d-ab62-4947-a35a-447f1c42a8b4",
        "value": "badgewing.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:46+00:00",
        "timestamp": "1774004446",
        "to_ids": true,
        "type": "domain",
        "uuid": "1516728b-029d-40fb-8437-aab0e92377cc",
        "value": "bearjail.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:46+00:00",
        "timestamp": "1774004447",
        "to_ids": true,
        "type": "domain",
        "uuid": "45639bd1-c481-4133-96a1-ef2bddf6af54",
        "value": "booksbabies.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:47+00:00",
        "timestamp": "1774004447",
        "to_ids": true,
        "type": "domain",
        "uuid": "7582cbf9-2821-40fb-9653-55d0f97bd99b",
        "value": "getfinefile.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:47+00:00",
        "timestamp": "1774004447",
        "to_ids": true,
        "type": "domain",
        "uuid": "3eafbb2e-b9e8-4c21-b446-1883d4ca5fa2",
        "value": "gxfiledownload.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:47+00:00",
        "timestamp": "1774004447",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff570132-e9fe-4f26-afb7-ba84d17afb13",
        "value": "hatstart.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:47+00:00",
        "timestamp": "1774004447",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bb2c89c-df0c-41da-8d4b-6d172b2b167e",
        "value": "limitline.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:47+00:00",
        "timestamp": "1774004447",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c274c61-ac3a-4c63-ac1d-6f93bb005883",
        "value": "minewave.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:47+00:00",
        "timestamp": "1774004447",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3c81609-541c-4548-8905-951580c946c7",
        "value": "mountainbattle.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:48+00:00",
        "timestamp": "1774004448",
        "to_ids": true,
        "type": "domain",
        "uuid": "03facb3b-54ab-4f11-aaee-5b3ab705a105",
        "value": "oillow.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:48+00:00",
        "timestamp": "1774004448",
        "to_ids": true,
        "type": "domain",
        "uuid": "add26f1b-c17d-48d0-afc3-45b34b6577f5",
        "value": "pipehair.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:48+00:00",
        "timestamp": "1774004448",
        "to_ids": true,
        "type": "domain",
        "uuid": "a07ff540-3b51-4c02-847e-ab861f3c640e",
        "value": "poisondress.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:48+00:00",
        "timestamp": "1774004448",
        "to_ids": true,
        "type": "domain",
        "uuid": "33b78e59-1116-4097-8eff-2ae7c7fc704d",
        "value": "recordhistory.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:48+00:00",
        "timestamp": "1774004448",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2cc640b-20b8-499a-8d29-30e3ecff6368",
        "value": "signchickens.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:48+00:00",
        "timestamp": "1774004448",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c602a3d-66e8-4ed2-a0b1-4f962ba0658f",
        "value": "sweaterumbrella.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:48+00:00",
        "timestamp": "1774004449",
        "to_ids": true,
        "type": "domain",
        "uuid": "d40af974-46fc-4584-b450-cf0ce2350de7",
        "value": "tempercream.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:49+00:00",
        "timestamp": "1774004449",
        "to_ids": false,
        "type": "url",
        "uuid": "44f31323-38ff-4347-905f-dfe58da19f3e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/d6280bb93c4f37ea4cec3bded691407952b8e1e7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T11:00:49+00:00",
        "timestamp": "1774004449",
        "to_ids": true,
        "type": "domain",
        "uuid": "b26c2f89-7c12-42b8-8ab3-7673d7e9824e",
        "value": "oatmealstraw.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:02+00:00",
        "timestamp": "1774008003",
        "to_ids": false,
        "type": "url",
        "uuid": "aceec4d4-6282-4032-81ec-cc03576d6a78",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0fa2e595756f9c8eee6ba1fee7b24c9de22c9fdb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:03+00:00",
        "timestamp": "1774008004",
        "to_ids": false,
        "type": "url",
        "uuid": "476c82ee-81ff-4c96-8152-9310f9e1e0bb",
        "value": "https://x.com/K_N1kolenko/status/2034958837128503633",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:04+00:00",
        "timestamp": "1774008004",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "ae6c674f-cb40-452b-bc47-f2ac21c9d99c",
        "value": "108.187.40.45",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:04+00:00",
        "timestamp": "1774008005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e16d9e1d-d03a-49ae-87ff-027d34221cf4",
        "value": "149.104.0.151",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:05+00:00",
        "timestamp": "1774008005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "8fd22639-c58d-4f0f-8cd4-f4451c8569dd",
        "value": "192.238.178.243",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:05+00:00",
        "timestamp": "1774008005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "8955cbe9-681d-4944-afc4-c6d86d4edaf9",
        "value": "192.252.181.40",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:05+00:00",
        "timestamp": "1774008005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "954de80d-f65d-4f5f-9e47-c9179db79193",
        "value": "23.141.172.70",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:05+00:00",
        "timestamp": "1774008005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "eb68cdd5-703e-4722-bff9-717b581eb359",
        "value": "47.237.17.191",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:05+00:00",
        "timestamp": "1774008006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "0d7aba79-f268-4891-93ed-89765aa426bb",
        "value": "47.237.185.140",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:06+00:00",
        "timestamp": "1774008006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b2b849ba-a855-4a95-9af4-692f6df82c0e",
        "value": "47.237.98.139",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:06+00:00",
        "timestamp": "1774008006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "75255f21-9525-42ff-9249-49ce889208a8",
        "value": "47.83.123.66",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:06+00:00",
        "timestamp": "1774008006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "dd0394a7-67c3-4ee9-9cc5-38f165a9c125",
        "value": "8.219.170.249",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "farfli",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:06+00:00",
        "timestamp": "1774008006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "5b669357-c655-48a5-81d8-5aa050494144",
        "value": "8.222.143.232",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:06+00:00",
        "timestamp": "1774008006",
        "to_ids": false,
        "type": "url",
        "uuid": "d65119be-f8f4-46ad-be3c-4acbbfe302a2",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0bc4ff3f95a97f6e996220001c8397a539a7754b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:06+00:00",
        "timestamp": "1774008007",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f31ba1a-56d1-472d-a198-6dbe3b7ed3f6",
        "value": "designtitle.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:07+00:00",
        "timestamp": "1774008007",
        "to_ids": true,
        "type": "domain",
        "uuid": "3221fe68-6633-476d-873e-421ee3471943",
        "value": "harmonycrib.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T12:00:07+00:00",
        "timestamp": "1774008007",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f9396fe-0098-4713-b1b2-982c1e03a345",
        "value": "rulegovernor.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:03+00:00",
        "timestamp": "1774011603",
        "to_ids": false,
        "type": "url",
        "uuid": "f9f02c97-876b-453f-921d-7ca1cb369cdf",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/dacbab1e554bec24bedc1e969010e49f87bdeb18",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:03+00:00",
        "timestamp": "1774011604",
        "to_ids": false,
        "type": "url",
        "uuid": "d5316557-d08c-4441-8461-349d3353f2f4",
        "value": "https://www.threatfabric.com/blogs/perseus-dto-malware-that-takes-notes",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:04+00:00",
        "timestamp": "1774011604",
        "to_ids": false,
        "type": "url",
        "uuid": "730cdc1a-055f-43b5-aff7-6916437b5160",
        "value": "https://www.virustotal.com/gui/file/2524e9d5ed1e55332fe2d1cc0e7ad4e2656ad5ca624199e6f619325979b3529a/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:04+00:00",
        "timestamp": "1774011604",
        "to_ids": true,
        "type": "domain",
        "uuid": "d77a1b37-5571-4981-ae59-826546613536",
        "value": "bolsanslarkanka.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:04+00:00",
        "timestamp": "1774011604",
        "to_ids": true,
        "type": "domain",
        "uuid": "e12c8fd9-a42a-4995-a98b-0e8308e74677",
        "value": "digital-reel-studio.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:04+00:00",
        "timestamp": "1774011605",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc99c632-eb1a-48a4-bcb8-4dca2b9db2c9",
        "value": "md5.fit",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:05+00:00",
        "timestamp": "1774011605",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e2f1309-6213-40eb-a1a4-f9d52d2aee61",
        "value": "rally.vin",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:05+00:00",
        "timestamp": "1774011605",
        "to_ids": true,
        "type": "domain",
        "uuid": "1631a99b-7b05-4531-b3c2-024b3f9953a1",
        "value": "tasdaitaly.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:05+00:00",
        "timestamp": "1774011605",
        "to_ids": true,
        "type": "domain",
        "uuid": "2615dbee-0919-4f46-8a2d-bfb25ed57ab0",
        "value": "ycomtz.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:05+00:00",
        "timestamp": "1774011606",
        "to_ids": true,
        "type": "domain",
        "uuid": "094e71e8-39dc-4318-b42f-4ec545015aec",
        "value": "zcorw.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:06+00:00",
        "timestamp": "1774011606",
        "to_ids": true,
        "type": "domain",
        "uuid": "afc632bc-df9e-4a7a-8ef2-f60c6f591e6d",
        "value": "api.bolsanslarkanka.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:06+00:00",
        "timestamp": "1774011606",
        "to_ids": true,
        "type": "domain",
        "uuid": "6152552a-693c-463b-914e-f00ac486e80d",
        "value": "api.rally.vin",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:06+00:00",
        "timestamp": "1774011606",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a64ab0b-375a-4865-978a-de6842136feb",
        "value": "api.tasdaitaly.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:06+00:00",
        "timestamp": "1774011606",
        "to_ids": true,
        "type": "domain",
        "uuid": "33a69728-b551-45b7-9a25-91d7936c37b6",
        "value": "assets.md5.fit",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:06+00:00",
        "timestamp": "1774011606",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdebce2a-8652-4d9a-88ba-23c4879b664f",
        "value": "ex.yunv.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:06+00:00",
        "timestamp": "1774011606",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6690fe8-b51e-4697-ab74-8e559fe4f148",
        "value": "flow.zcorw.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:07+00:00",
        "timestamp": "1774011607",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fa507fd-3b46-4553-bbaf-ec95b3f9e2da",
        "value": "jjn8n.digital-reel-studio.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:07+00:00",
        "timestamp": "1774011607",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a04b37d-143c-4c80-8634-bfe0a213d785",
        "value": "jjportainer.digital-reel-studio.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:07+00:00",
        "timestamp": "1774011607",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbf718e1-7d86-494f-8f2e-c8890ef41a2c",
        "value": "panel.bolsanslarkanka.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:07+00:00",
        "timestamp": "1774011607",
        "to_ids": true,
        "type": "domain",
        "uuid": "746fb700-616b-4874-aeb5-4b489b252bc8",
        "value": "r.md5.fit",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:07+00:00",
        "timestamp": "1774011607",
        "to_ids": true,
        "type": "domain",
        "uuid": "226fd572-ace1-4171-88f0-69e0f7d62ec6",
        "value": "rstapi.bolsanslarkanka.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:07+00:00",
        "timestamp": "1774011607",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa970540-f884-492a-9bc0-23cde78ea7ca",
        "value": "static.cskh.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:07+00:00",
        "timestamp": "1774011608",
        "to_ids": true,
        "type": "domain",
        "uuid": "7526f97c-9c02-41a7-8014-6e92ac804d67",
        "value": "static.ycomtz.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:08+00:00",
        "timestamp": "1774011608",
        "to_ids": true,
        "type": "domain",
        "uuid": "51b7b693-02c8-4024-8539-062e6b6cdda1",
        "value": "ws.bolsanslarkanka.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_perseus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:08+00:00",
        "timestamp": "1774011608",
        "to_ids": true,
        "type": "domain",
        "uuid": "559ba1d3-606b-4dc0-99d9-e1814cb16793",
        "value": "ws.tasdaitaly.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:08+00:00",
        "timestamp": "1774011608",
        "to_ids": false,
        "type": "url",
        "uuid": "53c5418b-af17-4ca3-a64a-29c3d9386979",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b22eb2b267ff87405f68a7bf252ac7bd4b279e44",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:08+00:00",
        "timestamp": "1774011608",
        "to_ids": false,
        "type": "url",
        "uuid": "ae3cf27f-8b60-4ff6-8a77-da11fd5884db",
        "value": "https://x.com/K_N1kolenko/status/2034964003030552641",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:08+00:00",
        "timestamp": "1774011608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "fccabb8b-b480-4fdf-a031-6abb68fbb295",
        "value": "107.172.13.234",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:08+00:00",
        "timestamp": "1774011608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b82c7a3e-2be4-436f-a77a-34fb405ae63e",
        "value": "192.227.219.97",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:08+00:00",
        "timestamp": "1774011609",
        "to_ids": false,
        "type": "url",
        "uuid": "8cd33b16-d2e6-4da7-a828-e3700479720c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a1f068c1dd8b835c0186d3fede2b1cfada1873d4",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:09+00:00",
        "timestamp": "1774011609",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f2736a0-1d5c-4595-aab2-20dc3f2a488d",
        "value": "carpeta.mi-p0rtal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:09+00:00",
        "timestamp": "1774011609",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2264e54-8090-47cf-86ab-429471c88c83",
        "value": "client-01ld-uf00cu0cu.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T13:00:09+00:00",
        "timestamp": "1774011609",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa449d2e-dc05-45ee-b513-fbe831075a0a",
        "value": "motwbptgqop.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:04+00:00",
        "timestamp": "1774015204",
        "to_ids": false,
        "type": "url",
        "uuid": "f91eec4d-e181-4984-a8f7-2d4773fe5625",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1cd8d626a05fa94c6dc49088f4ff0aa7c8fcbd7f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:04+00:00",
        "timestamp": "1774015205",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "998355bb-9e4e-4913-9a3d-8e62856681bf",
        "value": "193.222.99.231",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:05+00:00",
        "timestamp": "1774015205",
        "to_ids": false,
        "type": "url",
        "uuid": "a1540b19-ef00-4248-828a-bf71ac968b71",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e02c5477f7a6bfc5c03103a966cc466ca51ddf5f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:05+00:00",
        "timestamp": "1774015205",
        "to_ids": false,
        "type": "url",
        "uuid": "a859a9a7-6372-4563-9069-fa92097e6b2d",
        "value": "https://x.com/smica83/status/2034654068589654226",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:05+00:00",
        "timestamp": "1774015205",
        "to_ids": false,
        "type": "url",
        "uuid": "29ac7116-2226-4c1a-b93d-94b792c16b42",
        "value": "https://www.virustotal.com/gui/file/a47e3628d1e61b007c4c17d11678c1dd6b5b014efdef2afad34893da2fa8127d/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:05+00:00",
        "timestamp": "1774015205",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f6ce388a-b459-4a3c-b157-41e6414ce007",
        "value": "144.31.0.81",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:05+00:00",
        "timestamp": "1774015205",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fe728d0-e765-415d-8400-8b8421b85e84",
        "value": "freegaten.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:05+00:00",
        "timestamp": "1774015206",
        "to_ids": true,
        "type": "domain",
        "uuid": "14763ea4-6270-41b8-94f9-2ff62c904f2d",
        "value": "freegaten.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:06+00:00",
        "timestamp": "1774015206",
        "to_ids": false,
        "type": "url",
        "uuid": "d7473289-6640-481d-973a-6bfe872a4249",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a9765f9a2f50441a99bbf5820d59fec08fe9776e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:06+00:00",
        "timestamp": "1774015206",
        "to_ids": false,
        "type": "url",
        "uuid": "79eaa41d-2b92-4e2f-b5fa-ad4f3c1ea31a",
        "value": "https://x.com/ShadowOpCode/status/2034653843397501272",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:06+00:00",
        "timestamp": "1774015206",
        "to_ids": false,
        "type": "url",
        "uuid": "5113953b-d8be-4ba1-96bf-e68e0fcae2b6",
        "value": "https://www.virustotal.com/gui/file/fbd84c13f92b04ac2fca4748fdfb04468d6fb22f361a0fd1a7551ce9762597ef/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:06+00:00",
        "timestamp": "1774015206",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "bb8b9f3f-bab6-4259-b289-747b1b0b31d0",
        "value": "69.61.36.229",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:06+00:00",
        "timestamp": "1774015206",
        "to_ids": false,
        "type": "url",
        "uuid": "502a52d0-9d1b-4a16-93c0-b5ef5edceddb",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/da0129d4aace0cf1f56370397ba73bfb847b8b4c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:06+00:00",
        "timestamp": "1774015206",
        "to_ids": false,
        "type": "url",
        "uuid": "3f498d86-72f5-4096-a9e1-eeb7def8c106",
        "value": "https://jp.security.ntt/insights_resources/tech_blog/stoatwaffle_malware_en",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:07+00:00",
        "timestamp": "1774015207",
        "to_ids": true,
        "type": "domain",
        "uuid": "f19f2038-9df5-44ec-866b-c212a9febf6b",
        "value": "tasksettingsnew.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:07+00:00",
        "timestamp": "1774015207",
        "to_ids": false,
        "type": "url",
        "uuid": "26bd8d7c-44e3-40ec-b6aa-ddf442acc6c6",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/29675afba5c254d413539e3f53a481afe5f73aaf",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:07+00:00",
        "timestamp": "1774015207",
        "to_ids": false,
        "type": "url",
        "uuid": "356ec22e-3191-4a8f-a6eb-a301a1da22b7",
        "value": "https://x.com/skocherhan/status/2034778424170946657",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:07+00:00",
        "timestamp": "1774015207",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b6912ff-a29a-4dab-8d53-fb79b40ca4b6",
        "value": "admin.check-user.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:07+00:00",
        "timestamp": "1774015207",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccd31978-bd1e-49d8-8fc3-27feb13d29d2",
        "value": "cert.abrdns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:07+00:00",
        "timestamp": "1774015207",
        "to_ids": true,
        "type": "domain",
        "uuid": "f048bf91-02da-43ea-b376-84d6b931e9a6",
        "value": "changephone.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:07+00:00",
        "timestamp": "1774015208",
        "to_ids": true,
        "type": "domain",
        "uuid": "d44f8662-b802-4dc2-ab81-9ce2f2ed6d8c",
        "value": "check-invoice.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:08+00:00",
        "timestamp": "1774015208",
        "to_ids": true,
        "type": "domain",
        "uuid": "b563c981-728b-4c59-a85c-42e862504f1e",
        "value": "check-spo.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:08+00:00",
        "timestamp": "1774015208",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b714009-52a2-4d51-9cca-b7f42e3a000d",
        "value": "check-user.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:08+00:00",
        "timestamp": "1774015208",
        "to_ids": true,
        "type": "domain",
        "uuid": "14cc6c8c-3413-4c39-9f21-e5bc27f5dab4",
        "value": "check.cert.abrdns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:08+00:00",
        "timestamp": "1774015208",
        "to_ids": true,
        "type": "domain",
        "uuid": "662eef75-c2f3-4001-89f7-082f72e7a618",
        "value": "check.traffice-safe.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:08+00:00",
        "timestamp": "1774015208",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6b3bab8-0a7b-4e1a-9ea8-52a45afdf531",
        "value": "confirm.tax-deliver.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:08+00:00",
        "timestamp": "1774015209",
        "to_ids": true,
        "type": "domain",
        "uuid": "83fc749e-f8c4-4366-ba5a-026049b507c1",
        "value": "contactinfo.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:09+00:00",
        "timestamp": "1774015209",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbf63ea1-82ff-4fb7-886f-3890eed73dde",
        "value": "corona.koreahealth.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:09+00:00",
        "timestamp": "1774015209",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b87d5fb-37f7-4efb-a6e4-5e1f94505ec8",
        "value": "daehanpolice.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:09+00:00",
        "timestamp": "1774015209",
        "to_ids": true,
        "type": "domain",
        "uuid": "8826c062-59f3-45ce-ba33-ee41622d5bee",
        "value": "directpolice.healthorg.abrdns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:09+00:00",
        "timestamp": "1774015209",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1c1a54e-d0d7-4c18-baca-7da6f43b9d68",
        "value": "docs-traff.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:09+00:00",
        "timestamp": "1774015209",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c60f1ce-f0c9-4cf3-a82d-7cc72694137d",
        "value": "dynamicdepinvoice.abrdns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:09+00:00",
        "timestamp": "1774015209",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbe8b743-bf65-472b-bb0a-d8aa266034ad",
        "value": "e-document.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:09+00:00",
        "timestamp": "1774015210",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b1be80e-5187-4122-92bc-34a73662d805",
        "value": "efine-gov.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:10+00:00",
        "timestamp": "1774015210",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c285135-89ef-4b00-8459-6a1497a6c9b4",
        "value": "efine-kor.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:10+00:00",
        "timestamp": "1774015210",
        "to_ids": true,
        "type": "domain",
        "uuid": "e24254ea-cbe4-4615-a654-15c77f4cfd2f",
        "value": "goegle-auth.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:10+00:00",
        "timestamp": "1774015210",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7de24ea-cf84-4ac1-998b-beed487f6561",
        "value": "gov-docs.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:10+00:00",
        "timestamp": "1774015210",
        "to_ids": true,
        "type": "domain",
        "uuid": "21c2e512-a883-4814-89e7-d4e40013d1fb",
        "value": "green-traffic.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:10+00:00",
        "timestamp": "1774015210",
        "to_ids": true,
        "type": "domain",
        "uuid": "1687f317-01c5-4e47-aae1-4125f98c131a",
        "value": "healthorg.abrdns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:10+00:00",
        "timestamp": "1774015211",
        "to_ids": true,
        "type": "domain",
        "uuid": "e509eb13-362c-4733-bd87-51ea06be0077",
        "value": "hello0dns.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:11+00:00",
        "timestamp": "1774015211",
        "to_ids": true,
        "type": "domain",
        "uuid": "648b9ecd-8b8f-4555-94f2-8ed2f88f6710",
        "value": "help.nv-help.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:11+00:00",
        "timestamp": "1774015211",
        "to_ids": true,
        "type": "domain",
        "uuid": "c836c78e-9817-4d70-a8d6-82d002301ca7",
        "value": "help.policeinvoice.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:11+00:00",
        "timestamp": "1774015211",
        "to_ids": true,
        "type": "domain",
        "uuid": "64817d11-2681-405b-9f52-cff2a20ecb2f",
        "value": "help.swatpolicy.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:11+00:00",
        "timestamp": "1774015211",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccd6323a-1f24-4b9a-9d9b-83265eac1e4f",
        "value": "helppolice.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:11+00:00",
        "timestamp": "1774015211",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ac72324-3876-42e0-ba0f-140f2adc198f",
        "value": "hometax.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:11+00:00",
        "timestamp": "1774015211",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b2b402d-eb33-49bc-ae7e-71e96f62e7af",
        "value": "invoice-doc.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:12+00:00",
        "timestamp": "1774015212",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf9120e8-453a-4511-814f-286cc62e3eea",
        "value": "invoice.accesscam.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:12+00:00",
        "timestamp": "1774015212",
        "to_ids": true,
        "type": "domain",
        "uuid": "f68d7b9a-adcb-4d13-b04b-4e7a4e0155f8",
        "value": "invoice.check-spo.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:12+00:00",
        "timestamp": "1774015212",
        "to_ids": true,
        "type": "domain",
        "uuid": "0496960d-1cad-4e3f-b981-837b13cd814a",
        "value": "invoice.p0licehelp.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:12+00:00",
        "timestamp": "1774015212",
        "to_ids": true,
        "type": "domain",
        "uuid": "c772f766-1f08-4eaf-a9f3-09a9cdb6be78",
        "value": "invoice.policeinvoice.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:12+00:00",
        "timestamp": "1774015212",
        "to_ids": true,
        "type": "domain",
        "uuid": "4010803d-a2c8-47bb-8df0-71e44791c8e6",
        "value": "invoice.rep32-tax.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:12+00:00",
        "timestamp": "1774015212",
        "to_ids": true,
        "type": "domain",
        "uuid": "61e3c8cd-36f3-4feb-af71-ec11277feb2d",
        "value": "justicefirm.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:12+00:00",
        "timestamp": "1774015213",
        "to_ids": true,
        "type": "domain",
        "uuid": "34473e2c-9f02-4a3d-aa62-1ca7969d9911",
        "value": "korea-traffic.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:13+00:00",
        "timestamp": "1774015213",
        "to_ids": true,
        "type": "domain",
        "uuid": "943b6dd2-3791-4c33-bc69-dbfaa3d806a2",
        "value": "koreahealth.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:13+00:00",
        "timestamp": "1774015213",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ba3b51e-523d-4985-aced-5b410403324e",
        "value": "koreapay.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:13+00:00",
        "timestamp": "1774015213",
        "to_ids": true,
        "type": "domain",
        "uuid": "174744b2-a6c2-4d04-af10-53201084e1a0",
        "value": "kro-cert.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:13+00:00",
        "timestamp": "1774015213",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e4dae3a-dde5-431b-b73f-38520e684cdd",
        "value": "lawfirm.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:13+00:00",
        "timestamp": "1774015213",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ae74130-3530-47f8-90bc-051190a652ee",
        "value": "laworgan.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:13+00:00",
        "timestamp": "1774015214",
        "to_ids": true,
        "type": "domain",
        "uuid": "68ddebfb-d32e-4f47-9b86-83b20e6520e1",
        "value": "login.nid-verify.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:14+00:00",
        "timestamp": "1774015214",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e48d6cc-69ee-4045-826b-bd879978515f",
        "value": "mail-deliver.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:14+00:00",
        "timestamp": "1774015214",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cb4e90f-c874-4abe-9002-41d98acbe6fc",
        "value": "mail.green-traffic.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:14+00:00",
        "timestamp": "1774015214",
        "to_ids": true,
        "type": "domain",
        "uuid": "d37e1ecd-8a65-461d-920d-021541418322",
        "value": "missed-tax.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:14+00:00",
        "timestamp": "1774015214",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4102be8-6a65-48df-8e1f-338476ede119",
        "value": "naverpayhistory.koreapay.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:14+00:00",
        "timestamp": "1774015214",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1308a1d-6eee-4dca-8559-458da69fb283",
        "value": "ndoc-deliver.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:14+00:00",
        "timestamp": "1774015214",
        "to_ids": true,
        "type": "domain",
        "uuid": "d545c06b-f845-4dc4-84cd-da8c31c51348",
        "value": "nid-auth.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:14+00:00",
        "timestamp": "1774015215",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ec177be-096c-4000-a9b5-8a0634923fc3",
        "value": "nid-traffic.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:15+00:00",
        "timestamp": "1774015215",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff6216b9-de44-4bb1-88cc-6864c3f254af",
        "value": "nid-verify.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:15+00:00",
        "timestamp": "1774015215",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4cf8d47-14f7-45d3-bfc6-3df66377ba32",
        "value": "nid.police-notice-go.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:15+00:00",
        "timestamp": "1774015215",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee343593-2315-4fa8-8437-ca2c02bf62e8",
        "value": "ninfo.dynamicdepinvoice.abrdns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:15+00:00",
        "timestamp": "1774015216",
        "to_ids": true,
        "type": "domain",
        "uuid": "224e1f9a-ed38-4cd7-be5a-60c91f8b1367",
        "value": "nis-24.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:16+00:00",
        "timestamp": "1774015216",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb67be23-0421-4192-a751-ad5ca82d9717",
        "value": "note-tx.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:16+00:00",
        "timestamp": "1774015216",
        "to_ids": true,
        "type": "domain",
        "uuid": "809c3d87-8f76-4206-bc7b-63999dac50e8",
        "value": "npaylog.healthorg.abrdns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:16+00:00",
        "timestamp": "1774015216",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0c5fe78-4b32-496e-85f5-16b832edcd42",
        "value": "nv-help.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:16+00:00",
        "timestamp": "1774015216",
        "to_ids": true,
        "type": "domain",
        "uuid": "4dc2bfbb-1678-42e5-8328-d17ad1f166b4",
        "value": "p0licehelp.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:16+00:00",
        "timestamp": "1774015216",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f44d6c1-7ac9-450f-bc3b-5f0c083bd79a",
        "value": "p0liceinvoice.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:16+00:00",
        "timestamp": "1774015216",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b9bdbbe-4abf-4595-a5b6-b72825966512",
        "value": "poc-doc24.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:16+00:00",
        "timestamp": "1774015217",
        "to_ids": true,
        "type": "domain",
        "uuid": "19b5f1bb-2c8a-446b-b19b-6d0769f5ab70",
        "value": "poli-doc24.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:17+00:00",
        "timestamp": "1774015217",
        "to_ids": true,
        "type": "domain",
        "uuid": "127d61d3-9ebc-4b8c-a11b-20bdbae3fd34",
        "value": "police-notice-go.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:17+00:00",
        "timestamp": "1774015217",
        "to_ids": true,
        "type": "domain",
        "uuid": "7464ac08-a5ef-471b-acbe-258c67144eb0",
        "value": "police-notify.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:17+00:00",
        "timestamp": "1774015217",
        "to_ids": true,
        "type": "domain",
        "uuid": "e310673e-0a77-4dd9-8721-922b04959a54",
        "value": "police-of-traffic.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:17+00:00",
        "timestamp": "1774015217",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca131dd6-f96d-48be-9e02-a2d57e570fc4",
        "value": "police.webredirect.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:17+00:00",
        "timestamp": "1774015217",
        "to_ids": true,
        "type": "domain",
        "uuid": "e37dc9a7-a399-488d-bd4e-361882d81e74",
        "value": "policedoc.kozow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:17+00:00",
        "timestamp": "1774015218",
        "to_ids": true,
        "type": "domain",
        "uuid": "0aec405f-0bad-4e10-bdbc-a26494a2272e",
        "value": "policehelp.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:18+00:00",
        "timestamp": "1774015218",
        "to_ids": true,
        "type": "domain",
        "uuid": "9aadc111-d540-4f64-b763-6e5e6a7e4610",
        "value": "policeinvoice.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:18+00:00",
        "timestamp": "1774015218",
        "to_ids": true,
        "type": "domain",
        "uuid": "96b15a0f-f3bc-47d2-8882-49676e8da05c",
        "value": "policesupport.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:18+00:00",
        "timestamp": "1774015218",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1a8ed2c-27d4-44ee-81a3-8f95172a6a96",
        "value": "pueg.hello0dns.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:18+00:00",
        "timestamp": "1774015218",
        "to_ids": true,
        "type": "domain",
        "uuid": "c943c8ed-9aba-4399-9188-2ee54344c303",
        "value": "red-traffic.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:18+00:00",
        "timestamp": "1774015218",
        "to_ids": true,
        "type": "domain",
        "uuid": "5703b1dc-1149-49c9-962f-2e51848393c4",
        "value": "rep32-tax.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:18+00:00",
        "timestamp": "1774015219",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8aa3992-2160-4ee4-8206-0328095f3cee",
        "value": "safe-driving.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:19+00:00",
        "timestamp": "1774015219",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ba85ee7-c21f-4c4f-b4cf-3433ecd94195",
        "value": "safe-travel.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:19+00:00",
        "timestamp": "1774015219",
        "to_ids": true,
        "type": "domain",
        "uuid": "450ee590-2660-4701-8c51-e0658447712a",
        "value": "safe24.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:19+00:00",
        "timestamp": "1774015219",
        "to_ids": true,
        "type": "domain",
        "uuid": "faec881d-0457-4c03-900f-3844de7bb8c1",
        "value": "seoulpolice.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:19+00:00",
        "timestamp": "1774015219",
        "to_ids": true,
        "type": "domain",
        "uuid": "7504d081-dff9-4992-8edd-aac7bad1a377",
        "value": "service.goegle-auth.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:19+00:00",
        "timestamp": "1774015219",
        "to_ids": true,
        "type": "domain",
        "uuid": "7601c3e2-2c55-44ba-9a08-757023137b8e",
        "value": "support.policeinvoice.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:19+00:00",
        "timestamp": "1774015219",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bb4d5c1-210d-481a-b727-497dafa973f4",
        "value": "support.traffic-police24.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:19+00:00",
        "timestamp": "1774015220",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5e5c589-7599-4ea6-a94f-1612f207bef6",
        "value": "swatpolicy.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:20+00:00",
        "timestamp": "1774015220",
        "to_ids": true,
        "type": "domain",
        "uuid": "1841e8c4-c9ce-4b41-b81e-975408279365",
        "value": "t-get.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:20+00:00",
        "timestamp": "1774015220",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc37f9cd-9395-4ed9-a8e5-f24f16ca2cdc",
        "value": "targetpolice.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:20+00:00",
        "timestamp": "1774015220",
        "to_ids": true,
        "type": "domain",
        "uuid": "635ec949-9d07-4573-a3d0-5a38f06c78a2",
        "value": "tax-check.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:20+00:00",
        "timestamp": "1774015220",
        "to_ids": true,
        "type": "domain",
        "uuid": "2fdb6055-528b-4eef-8508-9e293e3db416",
        "value": "tax-deliver.v6.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:20+00:00",
        "timestamp": "1774015221",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc268b1d-e606-491d-a624-02a320aa19e8",
        "value": "tax-guide.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:21+00:00",
        "timestamp": "1774015221",
        "to_ids": true,
        "type": "domain",
        "uuid": "87654330-2713-48f5-9d36-2f601e01e217",
        "value": "tax.ooguy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:21+00:00",
        "timestamp": "1774015221",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9df0499-13d0-4459-9698-7c6ee7768276",
        "value": "traffic-mail.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:21+00:00",
        "timestamp": "1774015221",
        "to_ids": true,
        "type": "domain",
        "uuid": "a996ff10-d6d0-4326-be92-f4a2e4b09675",
        "value": "traffic-police.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:21+00:00",
        "timestamp": "1774015221",
        "to_ids": true,
        "type": "domain",
        "uuid": "3759f8b4-0f51-4220-ac31-585681a9f312",
        "value": "traffic-police24.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:21+00:00",
        "timestamp": "1774015221",
        "to_ids": true,
        "type": "domain",
        "uuid": "1aaf2586-3e4d-436e-b259-b7ffe76a35e9",
        "value": "traffic.safe-travel.v6.rocks",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:21+00:00",
        "timestamp": "1774015221",
        "to_ids": true,
        "type": "domain",
        "uuid": "479ec328-6b77-4685-b056-dfd3d7546b84",
        "value": "traffice-safe.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:21+00:00",
        "timestamp": "1774015222",
        "to_ids": true,
        "type": "domain",
        "uuid": "de738aa5-b4ae-48c4-b490-2bfeaef1437d",
        "value": "ugent-doc.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:22+00:00",
        "timestamp": "1774015222",
        "to_ids": true,
        "type": "domain",
        "uuid": "b545fbef-3d63-460b-bfaf-eee43116652f",
        "value": "urgent.swatpolicy.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:22+00:00",
        "timestamp": "1774015222",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9cdd516-a2d3-4687-9faf-6ed99139e417",
        "value": "verify.kro-cert.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:22+00:00",
        "timestamp": "1774015222",
        "to_ids": false,
        "type": "url",
        "uuid": "bf2b11e0-6349-40aa-b903-1c5f8166e963",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c4c7d61c4b343cd5cb8f2031794da98b02a73e95",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:22+00:00",
        "timestamp": "1774015222",
        "to_ids": true,
        "type": "domain",
        "uuid": "d888cddb-91ab-4057-8309-f19895ddd0f8",
        "value": "leadgenbulletin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:22+00:00",
        "timestamp": "1774015222",
        "to_ids": false,
        "type": "url",
        "uuid": "be7fcae5-3102-40ab-ab39-6a52dcc33bce",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/15f6e366de902a3a91c2afff776e49337d773bc9",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:22+00:00",
        "timestamp": "1774015223",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9217526-0c6e-4eb9-ba42-3393170c0b78",
        "value": "247vectorlink.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:23+00:00",
        "timestamp": "1774015223",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1953194-55c2-4473-9fd6-243757b52e40",
        "value": "acarinaflow.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:23+00:00",
        "timestamp": "1774015223",
        "to_ids": true,
        "type": "domain",
        "uuid": "5675c865-0892-4dcd-81c3-ed26cd395757",
        "value": "acroaticworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:23+00:00",
        "timestamp": "1774015223",
        "to_ids": true,
        "type": "domain",
        "uuid": "519cc76c-dfa5-4f8e-82ad-d0601374295b",
        "value": "addendumcoreio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:23+00:00",
        "timestamp": "1774015223",
        "to_ids": true,
        "type": "domain",
        "uuid": "832fa30e-5744-4f99-8867-cdf4e046c9c6",
        "value": "afootlayer.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:23+00:00",
        "timestamp": "1774015223",
        "to_ids": true,
        "type": "domain",
        "uuid": "74143600-80b2-465f-8429-defb209ab078",
        "value": "afritlabs.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:23+00:00",
        "timestamp": "1774015223",
        "to_ids": true,
        "type": "domain",
        "uuid": "c868328c-806f-4fb1-89c7-b1fbb39ccde5",
        "value": "aivrspace.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:24+00:00",
        "timestamp": "1774015224",
        "to_ids": true,
        "type": "domain",
        "uuid": "b31c76f3-d3a0-4afd-826b-23e2423783b6",
        "value": "alfaquinhubio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:24+00:00",
        "timestamp": "1774015224",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfdb0628-95bc-41ee-b8a0-08ab026c81ea",
        "value": "alkylolstudio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:24+00:00",
        "timestamp": "1774015224",
        "to_ids": true,
        "type": "domain",
        "uuid": "da2e9703-9c4b-43fb-89e8-3e6f3e118f41",
        "value": "almuerzotech.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:24+00:00",
        "timestamp": "1774015224",
        "to_ids": true,
        "type": "domain",
        "uuid": "33f9b28f-7e68-4c7c-8595-44c434badc64",
        "value": "amreetacloud.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:24+00:00",
        "timestamp": "1774015224",
        "to_ids": true,
        "type": "domain",
        "uuid": "abf61f78-94e0-4835-ae7c-f55d953ca838",
        "value": "amusialabs.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:24+00:00",
        "timestamp": "1774015224",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecba25b6-a2b9-4736-b86e-cc7c5c14080e",
        "value": "anatolicspace.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:24+00:00",
        "timestamp": "1774015225",
        "to_ids": true,
        "type": "domain",
        "uuid": "82f0b384-fcc6-4906-a593-73d04c04d56c",
        "value": "antipartbase.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:25+00:00",
        "timestamp": "1774015225",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8596cff-5384-4062-ae67-910b796ecad1",
        "value": "assyriabase.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:25+00:00",
        "timestamp": "1774015225",
        "to_ids": true,
        "type": "domain",
        "uuid": "58e9a5c9-bad0-4beb-ae03-2481aa1ba0b9",
        "value": "atrailworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:25+00:00",
        "timestamp": "1774015225",
        "to_ids": true,
        "type": "domain",
        "uuid": "8eae1b87-391d-4a6d-836a-bf1d89673933",
        "value": "b6.solcommunity.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:25+00:00",
        "timestamp": "1774015225",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3f55952-337a-4c96-8ff1-13addb89e6c3",
        "value": "backbarstackio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:25+00:00",
        "timestamp": "1774015225",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3d1ff9b-d8c4-42e9-b3ac-e34a50029461",
        "value": "balkaniclayer.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:25+00:00",
        "timestamp": "1774015225",
        "to_ids": true,
        "type": "domain",
        "uuid": "780df4ad-5854-4406-b26c-b3e3213edcdb",
        "value": "bandusialabs.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:26+00:00",
        "timestamp": "1774015226",
        "to_ids": true,
        "type": "domain",
        "uuid": "5704f090-e87d-4b87-a2fe-3b382f958f92",
        "value": "bawleygridio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:26+00:00",
        "timestamp": "1774015226",
        "to_ids": true,
        "type": "domain",
        "uuid": "465a40ef-5870-45d9-ba30-d6fc89d43109",
        "value": "baxenivuvoiagroup.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:26+00:00",
        "timestamp": "1774015226",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9f5bbdb-eb16-41ae-9a00-863e41635b32",
        "value": "beewareflow.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:26+00:00",
        "timestamp": "1774015226",
        "to_ids": true,
        "type": "domain",
        "uuid": "9096578f-6993-4202-86ec-dbc890bf5f3b",
        "value": "bephrasebase.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:26+00:00",
        "timestamp": "1774015226",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1128532-2a26-4b21-9908-c0414b33f992",
        "value": "bephrasestudio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:26+00:00",
        "timestamp": "1774015226",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b7af442-debe-422a-aef4-2ea910493fe9",
        "value": "bewarytech.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:26+00:00",
        "timestamp": "1774015227",
        "to_ids": true,
        "type": "domain",
        "uuid": "4dec05e0-00ad-4f74-a317-b05a8811183d",
        "value": "blashygrid.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:27+00:00",
        "timestamp": "1774015227",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1bb9200-4a48-42b3-8613-f848cbd2578d",
        "value": "bopeheziaanalytics.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:27+00:00",
        "timestamp": "1774015227",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c48f8f7-de26-4e58-8564-f486476471fb",
        "value": "bubblecloud.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:27+00:00",
        "timestamp": "1774015227",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2501d7a-b510-4d14-b003-2d8c77ab98cd",
        "value": "buhavitutexresources.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:27+00:00",
        "timestamp": "1774015227",
        "to_ids": true,
        "type": "domain",
        "uuid": "40b52bc1-5acf-4ede-ac6e-043fb609a6f2",
        "value": "butaqaqorcapital.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:27+00:00",
        "timestamp": "1774015227",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6921026-1509-46f5-b452-d8d2d6f31ec7",
        "value": "butayuxoaventures.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:27+00:00",
        "timestamp": "1774015228",
        "to_ids": true,
        "type": "domain",
        "uuid": "75ec2632-9fe7-4813-87ec-5e233c33394a",
        "value": "cacizuumpartners.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:28+00:00",
        "timestamp": "1774015228",
        "to_ids": true,
        "type": "domain",
        "uuid": "452be3cf-1ea0-4dab-8f2a-a45f37bc104d",
        "value": "cadgerstack.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:28+00:00",
        "timestamp": "1774015228",
        "to_ids": true,
        "type": "domain",
        "uuid": "881c2478-d5f1-4288-9e40-03a758164892",
        "value": "caesuraespace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:28+00:00",
        "timestamp": "1774015228",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef659b8e-5e85-43fe-8e76-d50f269e5b06",
        "value": "casivufelaorcollective2026.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:28+00:00",
        "timestamp": "1774015228",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c11661e-5f56-4188-b3fe-120574c2cf2b",
        "value": "certosastack.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:28+00:00",
        "timestamp": "1774015228",
        "to_ids": true,
        "type": "domain",
        "uuid": "b37e28c4-6d6c-49b5-804d-7b72dc8aefb9",
        "value": "chekmaklayer.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:28+00:00",
        "timestamp": "1774015228",
        "to_ids": true,
        "type": "domain",
        "uuid": "57782b77-b40e-4cea-9505-08450feeb3b6",
        "value": "chemistflow.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:28+00:00",
        "timestamp": "1774015229",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0b78962-d3f5-442e-93e3-145bd6a0fdb3",
        "value": "chondrelayer.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:29+00:00",
        "timestamp": "1774015229",
        "to_ids": true,
        "type": "domain",
        "uuid": "be00b2d2-91cc-4c58-9ea8-cb5b2709fcbd",
        "value": "chufatech.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:29+00:00",
        "timestamp": "1774015229",
        "to_ids": true,
        "type": "domain",
        "uuid": "90cfc97e-be8b-4d1f-ac77-351acc03f9d5",
        "value": "cogacakabapartners26.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:29+00:00",
        "timestamp": "1774015229",
        "to_ids": true,
        "type": "domain",
        "uuid": "4123e3ad-df2f-4010-8f9b-d0a8fb13b147",
        "value": "containgrid.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:29+00:00",
        "timestamp": "1774015229",
        "to_ids": true,
        "type": "domain",
        "uuid": "86bb9d75-b7e7-4156-871d-3882d587ea42",
        "value": "coverupbase.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:29+00:00",
        "timestamp": "1774015229",
        "to_ids": true,
        "type": "domain",
        "uuid": "01e19504-9b30-4394-b6a9-bcc09902b936",
        "value": "cranemenlayer.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:29+00:00",
        "timestamp": "1774015230",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b2187a3-96d7-437b-9009-a17ce45d815a",
        "value": "cranicspaceio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:30+00:00",
        "timestamp": "1774015230",
        "to_ids": true,
        "type": "domain",
        "uuid": "841f85c6-02db-4868-adcb-5136c3c699ea",
        "value": "cujuwuqinoiaanalytics.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:30+00:00",
        "timestamp": "1774015230",
        "to_ids": true,
        "type": "domain",
        "uuid": "900b5134-f25e-49e3-8047-f5fee17595d4",
        "value": "danteanbase.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:30+00:00",
        "timestamp": "1774015230",
        "to_ids": true,
        "type": "domain",
        "uuid": "4724b472-e9eb-4bb1-bd45-cc6553e95062",
        "value": "davihuriyoaanalytics.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:30+00:00",
        "timestamp": "1774015230",
        "to_ids": true,
        "type": "domain",
        "uuid": "d30d61ec-0797-4f5c-8d53-95f5ed0b51f2",
        "value": "debonairspace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:30+00:00",
        "timestamp": "1774015230",
        "to_ids": true,
        "type": "domain",
        "uuid": "05ca42b5-30aa-4b4e-b1dd-80c0dc0a3c87",
        "value": "dejosuonsystems.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:30+00:00",
        "timestamp": "1774015230",
        "to_ids": true,
        "type": "domain",
        "uuid": "08e4baa2-1c8f-486d-8a0d-9c97c9dd47f1",
        "value": "denverspace.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:30+00:00",
        "timestamp": "1774015231",
        "to_ids": true,
        "type": "domain",
        "uuid": "bffefdde-b206-4563-9125-1a9fcbdddcd9",
        "value": "dexscreen.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:31+00:00",
        "timestamp": "1774015231",
        "to_ids": true,
        "type": "domain",
        "uuid": "30bde55a-b6d9-4837-bfc1-222438c42c0c",
        "value": "dibasicworks.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:31+00:00",
        "timestamp": "1774015231",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae2e3a63-0528-4935-bb8e-6c6d7d39ecb7",
        "value": "divehitorsolutions.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:31+00:00",
        "timestamp": "1774015231",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bd9dbdc-ebb0-4f0e-a408-f9dead37a469",
        "value": "dolenaciaconsulting.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:31+00:00",
        "timestamp": "1774015231",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d8c9b5d-23bc-4823-902a-b244e65e820d",
        "value": "dolisamaholdingsltd.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:31+00:00",
        "timestamp": "1774015231",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc6bd602-dab7-4952-84f6-5857f99a636d",
        "value": "doverlabs.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:31+00:00",
        "timestamp": "1774015232",
        "to_ids": true,
        "type": "domain",
        "uuid": "87fb9356-7c63-4d6c-8e69-12111aba4199",
        "value": "dribblespace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:32+00:00",
        "timestamp": "1774015232",
        "to_ids": true,
        "type": "domain",
        "uuid": "db07cb42-e1c8-4f67-9958-92b7d83b57fc",
        "value": "drubspace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:32+00:00",
        "timestamp": "1774015232",
        "to_ids": true,
        "type": "domain",
        "uuid": "175148bc-1933-4fb0-a977-500b9510dfb9",
        "value": "ducagaiacapital.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:32+00:00",
        "timestamp": "1774015232",
        "to_ids": true,
        "type": "domain",
        "uuid": "6989c5f6-570d-4ddf-b07b-62c00b5b51bb",
        "value": "dupondiispaceio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:32+00:00",
        "timestamp": "1774015232",
        "to_ids": true,
        "type": "domain",
        "uuid": "058677eb-9b99-41bb-b11d-0d03a1214ddb",
        "value": "epactworks.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:32+00:00",
        "timestamp": "1774015232",
        "to_ids": true,
        "type": "domain",
        "uuid": "5178c620-85f5-4b95-932e-67e7492d11de",
        "value": "errantlabs.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:32+00:00",
        "timestamp": "1774015232",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ed7bec1-f976-47b1-a655-12e49429b521",
        "value": "essedebase.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:32+00:00",
        "timestamp": "1774015233",
        "to_ids": true,
        "type": "domain",
        "uuid": "24f735c4-4274-4392-b316-f704bb413fe4",
        "value": "fermacycore.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:33+00:00",
        "timestamp": "1774015233",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9969b43-0dab-48fd-96e9-a919685da262",
        "value": "fifovaluxiaholdingsinc.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:33+00:00",
        "timestamp": "1774015233",
        "to_ids": true,
        "type": "domain",
        "uuid": "f81879e2-a223-4174-849d-173c61c5358f",
        "value": "fijovikexpartners.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:33+00:00",
        "timestamp": "1774015233",
        "to_ids": true,
        "type": "domain",
        "uuid": "f386f2cd-8633-42dd-a48e-b873ed704a9a",
        "value": "flexurespace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:33+00:00",
        "timestamp": "1774015233",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4765337-6aa7-4de6-8a9e-15376bb8a0cf",
        "value": "flowpartnersflow.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:33+00:00",
        "timestamp": "1774015233",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e4162f0-5edd-491d-b912-9ae2607ade2f",
        "value": "focuscodesynergy.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:33+00:00",
        "timestamp": "1774015234",
        "to_ids": true,
        "type": "domain",
        "uuid": "03fb2cc1-dfba-4892-bdc5-c2fc1e8db71b",
        "value": "fotigixaorsolutions.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:34+00:00",
        "timestamp": "1774015234",
        "to_ids": true,
        "type": "domain",
        "uuid": "905b11e5-06d8-49b6-93a6-2e376b986c8c",
        "value": "fountfultech.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:34+00:00",
        "timestamp": "1774015234",
        "to_ids": true,
        "type": "domain",
        "uuid": "29de207c-c48c-4309-8ba1-aa3ea346db56",
        "value": "gabarithubio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:34+00:00",
        "timestamp": "1774015234",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf3e75c1-514c-4d3b-89fd-792a18b53d1b",
        "value": "gainerbase.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:34+00:00",
        "timestamp": "1774015234",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2dc3c48-375e-451d-8bb0-32be61426776",
        "value": "galixijiainvestments2026.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:34+00:00",
        "timestamp": "1774015234",
        "to_ids": true,
        "type": "domain",
        "uuid": "27cebe12-7b33-496f-884a-34800a3131aa",
        "value": "galletalayer.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:34+00:00",
        "timestamp": "1774015235",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6307f53-fe06-4011-a490-824ddcf8e62a",
        "value": "gamma101f-orge.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:35+00:00",
        "timestamp": "1774015235",
        "to_ids": true,
        "type": "domain",
        "uuid": "119a910d-ee50-4e70-b051-f79b04fbdb43",
        "value": "geosidgridio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:35+00:00",
        "timestamp": "1774015235",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a6d802c-0142-402a-b09e-f8a4e924ce26",
        "value": "gestorstack.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:35+00:00",
        "timestamp": "1774015235",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce032516-9401-462a-836a-afd629ed3ca3",
        "value": "gitobulojumgroup.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:35+00:00",
        "timestamp": "1774015235",
        "to_ids": true,
        "type": "domain",
        "uuid": "e58a7361-ad4e-4a05-85ae-57ad4e2c08e7",
        "value": "glitnirbase.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:35+00:00",
        "timestamp": "1774015235",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7850d4c-0023-4108-ab7c-495f14ddde4f",
        "value": "gojekuqemisservices.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:35+00:00",
        "timestamp": "1774015235",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7c8c754-bfa9-4a74-8277-25fb9a910f80",
        "value": "gotomuqiscollective24.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:35+00:00",
        "timestamp": "1774015236",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd3759fc-6a47-4f19-8922-fe5cd980d438",
        "value": "granatumtech.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:36+00:00",
        "timestamp": "1774015236",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ddee51d-dfc0-4010-9935-0df679ad7069",
        "value": "grappalabs.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:36+00:00",
        "timestamp": "1774015236",
        "to_ids": true,
        "type": "domain",
        "uuid": "70e5cba9-dbe6-4a86-a587-4f5bcbd51636",
        "value": "gribblehub.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:36+00:00",
        "timestamp": "1774015236",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bbea269-07fd-4b83-989a-08e6f19e9a62",
        "value": "gudisuaconsulting2026.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:36+00:00",
        "timestamp": "1774015236",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2667ab4-f70e-4f7f-960b-1e3460a43832",
        "value": "guzikomiasolutions.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:36+00:00",
        "timestamp": "1774015236",
        "to_ids": true,
        "type": "domain",
        "uuid": "754c571a-5488-4f86-8d0f-4f110393ac34",
        "value": "hafofosaisanalytics36.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:36+00:00",
        "timestamp": "1774015237",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f35c00f-549f-4371-89c5-f4a10b356c74",
        "value": "hakocloud.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:37+00:00",
        "timestamp": "1774015237",
        "to_ids": true,
        "type": "domain",
        "uuid": "da707766-b1a4-4c2b-b07d-af354447b46c",
        "value": "harsherworksio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:37+00:00",
        "timestamp": "1774015237",
        "to_ids": true,
        "type": "domain",
        "uuid": "82206758-1bcb-4b80-bc20-6419812308d7",
        "value": "hemiolicspace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:37+00:00",
        "timestamp": "1774015237",
        "to_ids": true,
        "type": "domain",
        "uuid": "027b1929-3677-4da4-89dd-60508dc20e12",
        "value": "himawanstudio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:37+00:00",
        "timestamp": "1774015237",
        "to_ids": true,
        "type": "domain",
        "uuid": "e89d87fb-87c5-4e28-abce-8923844ad0a5",
        "value": "hiwixabolaiagroup.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:37+00:00",
        "timestamp": "1774015237",
        "to_ids": true,
        "type": "domain",
        "uuid": "5169ef92-7c59-42da-9b69-23dbf61de103",
        "value": "holdsmanworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:37+00:00",
        "timestamp": "1774015238",
        "to_ids": true,
        "type": "domain",
        "uuid": "246454e8-1894-421b-922b-b8655195ac85",
        "value": "hopakbase.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:38+00:00",
        "timestamp": "1774015238",
        "to_ids": true,
        "type": "domain",
        "uuid": "95fd0ca4-3a9d-47fe-9a51-6306b145638b",
        "value": "hungarlayerio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:38+00:00",
        "timestamp": "1774015238",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8a4ab72-74f3-4a86-88b2-fa92c0ca494a",
        "value": "huriwoexservices.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:38+00:00",
        "timestamp": "1774015238",
        "to_ids": true,
        "type": "domain",
        "uuid": "3107ddbd-1fb3-47a2-a833-4cafc477c64b",
        "value": "hurtfulstudio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:38+00:00",
        "timestamp": "1774015238",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c25c1d3-b21f-4037-a737-659058667971",
        "value": "husocakiiagroup.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:38+00:00",
        "timestamp": "1774015238",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e137345-7faa-4000-99a0-7d877cd40eb9",
        "value": "hybridcore.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:38+00:00",
        "timestamp": "1774015238",
        "to_ids": true,
        "type": "domain",
        "uuid": "451bafdf-6958-42c1-be71-1ebca58eee6e",
        "value": "immeritcore.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:38+00:00",
        "timestamp": "1774015239",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f85e226-90ae-414c-bb5d-2b8db8639caa",
        "value": "inquirerlayer.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:39+00:00",
        "timestamp": "1774015239",
        "to_ids": true,
        "type": "domain",
        "uuid": "bca17ff8-0707-47aa-9731-77ff6fdb59e1",
        "value": "intexinebase.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:39+00:00",
        "timestamp": "1774015239",
        "to_ids": true,
        "type": "domain",
        "uuid": "84965537-1a35-470d-8be6-1f081b114d8b",
        "value": "jafigecilorcapitalinc.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:39+00:00",
        "timestamp": "1774015239",
        "to_ids": true,
        "type": "domain",
        "uuid": "be60d625-c65c-453a-81c0-84849e4663d4",
        "value": "jefubequsanalytics.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:39+00:00",
        "timestamp": "1774015239",
        "to_ids": true,
        "type": "domain",
        "uuid": "aedac799-b1bc-41ba-886c-f8dc418dc9d5",
        "value": "jenumiraniisgroup.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:39+00:00",
        "timestamp": "1774015239",
        "to_ids": true,
        "type": "domain",
        "uuid": "7aeec41d-ce1c-4db4-b512-513d76376cbf",
        "value": "jilikoxiiainvestmentsinc.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:39+00:00",
        "timestamp": "1774015239",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8c2dec3-6245-40e4-a396-22a42d9505f6",
        "value": "jubilebase.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:40+00:00",
        "timestamp": "1774015240",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf6df8cb-d748-40cc-ba0d-d8e62e51d6d0",
        "value": "kavagrid.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:40+00:00",
        "timestamp": "1774015240",
        "to_ids": true,
        "type": "domain",
        "uuid": "33291f75-1783-4286-9d10-657934ba4fc5",
        "value": "kepoyioradvisory64.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:40+00:00",
        "timestamp": "1774015240",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e97ad8e-1db9-4c19-8f86-4e4833a25a24",
        "value": "kifirifofiasystems.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:40+00:00",
        "timestamp": "1774015240",
        "to_ids": true,
        "type": "domain",
        "uuid": "078325d2-0d21-4c6c-85c3-b7895969dcef",
        "value": "kiseluacollectiveinc.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:40+00:00",
        "timestamp": "1774015240",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6e75ee6-d26f-4b07-8fff-329231753f75",
        "value": "kitishstack.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:40+00:00",
        "timestamp": "1774015240",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f429086-019d-498d-9e48-f5ba7e9fde41",
        "value": "klafternflow.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:40+00:00",
        "timestamp": "1774015241",
        "to_ids": true,
        "type": "domain",
        "uuid": "849ffce7-045c-45f7-a10b-239b0383fb4d",
        "value": "kokumspace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:41+00:00",
        "timestamp": "1774015241",
        "to_ids": true,
        "type": "domain",
        "uuid": "94e22669-4f22-45e7-a572-17dfdc15857b",
        "value": "kolachcloudio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:41+00:00",
        "timestamp": "1774015241",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cc50b21-ce41-4ee8-a83a-02df57a6f403",
        "value": "komowihumindustries.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:41+00:00",
        "timestamp": "1774015241",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e0d8250-2eec-48b5-bb80-29622a8d37aa",
        "value": "kopopeqecexresources16.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:41+00:00",
        "timestamp": "1774015241",
        "to_ids": true,
        "type": "domain",
        "uuid": "046ff503-8c9c-455c-a313-5a46f8d4f72e",
        "value": "korodoxalexservices.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:41+00:00",
        "timestamp": "1774015241",
        "to_ids": true,
        "type": "domain",
        "uuid": "944b01a5-4161-42c9-9c1c-54813a84b18e",
        "value": "kuqaziqaservices.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:41+00:00",
        "timestamp": "1774015241",
        "to_ids": true,
        "type": "domain",
        "uuid": "b798fd7d-8567-4a15-9b4e-bfd3d3ca0691",
        "value": "lampateflow.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:42+00:00",
        "timestamp": "1774015242",
        "to_ids": true,
        "type": "domain",
        "uuid": "c70be045-3e0f-471f-a2e0-57c4ba5230cb",
        "value": "lapbcloud.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:42+00:00",
        "timestamp": "1774015242",
        "to_ids": true,
        "type": "domain",
        "uuid": "540d406b-9c3d-422c-a4c6-a23cd692157e",
        "value": "lepayuwusservices.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:42+00:00",
        "timestamp": "1774015242",
        "to_ids": true,
        "type": "domain",
        "uuid": "385f0b83-994e-46f6-b46b-3c2d40eab6d7",
        "value": "letajarofauspartners.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:42+00:00",
        "timestamp": "1774015242",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2816a74-e5e3-4034-8270-4bc2c0c46ee1",
        "value": "linkflow360.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:42+00:00",
        "timestamp": "1774015243",
        "to_ids": true,
        "type": "domain",
        "uuid": "8fce1133-3063-489f-b2e1-ed741891f424",
        "value": "liyuanspace.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:43+00:00",
        "timestamp": "1774015243",
        "to_ids": true,
        "type": "domain",
        "uuid": "1265ea7a-f9ff-4306-8bce-e1e27eae2f7a",
        "value": "locatertech.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:43+00:00",
        "timestamp": "1774015243",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3e55988-2a97-40ed-adae-292662493df7",
        "value": "loroyawuexmanagement.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:43+00:00",
        "timestamp": "1774015243",
        "to_ids": true,
        "type": "domain",
        "uuid": "62be6225-61fb-4203-ae5d-07c850a9146a",
        "value": "lousiergrid.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:43+00:00",
        "timestamp": "1774015243",
        "to_ids": true,
        "type": "domain",
        "uuid": "419258f7-db8e-47b2-8be4-c41f8363d4c9",
        "value": "lovagetech.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:43+00:00",
        "timestamp": "1774015243",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dec1cc1-c69e-4893-bbaa-8936a425966d",
        "value": "lugoxeraxasolutions12.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:43+00:00",
        "timestamp": "1774015243",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4c295b1-29d7-4fdb-bb44-c321d38fd2b2",
        "value": "lurkerflow.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:44+00:00",
        "timestamp": "1774015244",
        "to_ids": true,
        "type": "domain",
        "uuid": "cce08de6-3df2-4fda-a9fe-e5121ba52695",
        "value": "lysogenylayer.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:44+00:00",
        "timestamp": "1774015244",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbf9a956-18f5-4e14-838f-93053bdb2e2a",
        "value": "mafuraspace.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:44+00:00",
        "timestamp": "1774015244",
        "to_ids": true,
        "type": "domain",
        "uuid": "35d0a5b8-4e3f-4d69-93b6-d4b2b101a007",
        "value": "marrubestack.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:44+00:00",
        "timestamp": "1774015244",
        "to_ids": true,
        "type": "domain",
        "uuid": "85e35186-5f13-4276-81d8-97fc3a4825ad",
        "value": "mediqibeiacollective.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:44+00:00",
        "timestamp": "1774015244",
        "to_ids": true,
        "type": "domain",
        "uuid": "20be6c55-ed3c-41c9-99af-192c72148e0a",
        "value": "meruitworks.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:44+00:00",
        "timestamp": "1774015244",
        "to_ids": true,
        "type": "domain",
        "uuid": "a536fddc-fd2f-46b9-93be-64836d84ebc5",
        "value": "mideaststudioio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:44+00:00",
        "timestamp": "1774015245",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a239fe9-fbbb-4fd9-af00-5a75a525b4a9",
        "value": "modokasocamanagement99.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:45+00:00",
        "timestamp": "1774015245",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9b711ad-da5e-4ca8-b7d5-bf8c17b1e26d",
        "value": "mozzettecloudco.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:45+00:00",
        "timestamp": "1774015245",
        "to_ids": true,
        "type": "domain",
        "uuid": "63fba5b4-8f5c-47b8-a761-44a88acecef6",
        "value": "mukocezuquumholdings.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:45+00:00",
        "timestamp": "1774015245",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a17e659-7b9c-42e2-990f-51059976997b",
        "value": "muranlabs.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:45+00:00",
        "timestamp": "1774015245",
        "to_ids": true,
        "type": "domain",
        "uuid": "c06d2204-c19c-4c21-ad92-f7416e15b496",
        "value": "mycostatlabsio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:45+00:00",
        "timestamp": "1774015246",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a7eeb02-6f48-43df-916b-0c2a4947a9b3",
        "value": "neelacloud.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:46+00:00",
        "timestamp": "1774015246",
        "to_ids": true,
        "type": "domain",
        "uuid": "85ae4abb-03d5-4010-9b8f-b583b59bf49d",
        "value": "nervismstudioio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:46+00:00",
        "timestamp": "1774015246",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f9b8ceb-f7c1-4477-80d2-9cf68221b7d4",
        "value": "netegrid.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:46+00:00",
        "timestamp": "1774015246",
        "to_ids": true,
        "type": "domain",
        "uuid": "00af0d15-7275-412d-a726-730a6f56192c",
        "value": "nolabesisgroup.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:46+00:00",
        "timestamp": "1774015246",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b17fde6-5584-404b-b594-5f12f64364ef",
        "value": "nucleaseflow.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:46+00:00",
        "timestamp": "1774015246",
        "to_ids": true,
        "type": "domain",
        "uuid": "5516266e-a4be-4ae6-b004-a254cac3b1b9",
        "value": "nuclelilabs.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:46+00:00",
        "timestamp": "1774015247",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f934f0c-3f00-46a5-86a5-967d44156b39",
        "value": "nulameorventures99.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:47+00:00",
        "timestamp": "1774015247",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e65886d-36b0-4094-be9a-dca30f09d5cf",
        "value": "obelismcloud.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:47+00:00",
        "timestamp": "1774015247",
        "to_ids": true,
        "type": "domain",
        "uuid": "b01e3529-fb94-4ad8-9915-41c6e964c9ae",
        "value": "oilfishstudio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:47+00:00",
        "timestamp": "1774015247",
        "to_ids": true,
        "type": "domain",
        "uuid": "95780dfb-7ed4-42e5-af94-5209bf80ba7f",
        "value": "outpartspace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:47+00:00",
        "timestamp": "1774015247",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6612e5f-b8cc-445f-b8a4-1615a03f8f5e",
        "value": "outreachspace.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:47+00:00",
        "timestamp": "1774015247",
        "to_ids": true,
        "type": "domain",
        "uuid": "805ef544-d1ef-47e4-aded-a133f433b966",
        "value": "overwordflow.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:47+00:00",
        "timestamp": "1774015248",
        "to_ids": true,
        "type": "domain",
        "uuid": "321055e5-9463-41a2-b1d8-fb4554ff6129",
        "value": "oxreimstack.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:48+00:00",
        "timestamp": "1774015248",
        "to_ids": true,
        "type": "domain",
        "uuid": "28b6917a-0ead-4865-916b-ba324052f7cc",
        "value": "pacinkogrid.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:48+00:00",
        "timestamp": "1774015248",
        "to_ids": true,
        "type": "domain",
        "uuid": "940fb842-f161-40c2-a5ef-71cc62c75a17",
        "value": "pargeterworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:48+00:00",
        "timestamp": "1774015248",
        "to_ids": true,
        "type": "domain",
        "uuid": "78273ba5-729c-4d5f-9e05-bc4727cde3c4",
        "value": "paucifyspace.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:48+00:00",
        "timestamp": "1774015248",
        "to_ids": true,
        "type": "domain",
        "uuid": "e692f184-a203-40bd-b693-03c29ecf3fa7",
        "value": "pawikacisinvestments36.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:48+00:00",
        "timestamp": "1774015248",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc8f48b1-9879-4cd4-a9b5-8f72fc160725",
        "value": "peceniaindustries8.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:48+00:00",
        "timestamp": "1774015248",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b08db91-2e75-44bd-8546-ceec9f90b9cd",
        "value": "pefuzoxaboradvisory.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:48+00:00",
        "timestamp": "1774015249",
        "to_ids": true,
        "type": "domain",
        "uuid": "1946868d-333f-4015-8133-95a312159c66",
        "value": "penaeabaseco.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:49+00:00",
        "timestamp": "1774015249",
        "to_ids": true,
        "type": "domain",
        "uuid": "44c17ebf-e3eb-448b-ad02-4d10ac03bb1a",
        "value": "pepticalworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:49+00:00",
        "timestamp": "1774015249",
        "to_ids": true,
        "type": "domain",
        "uuid": "75baea8e-d377-457d-b7d8-248461662c1f",
        "value": "pockcloud.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:49+00:00",
        "timestamp": "1774015249",
        "to_ids": true,
        "type": "domain",
        "uuid": "4472237d-0e11-4026-895e-13772c021164",
        "value": "poddygrid.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:49+00:00",
        "timestamp": "1774015249",
        "to_ids": true,
        "type": "domain",
        "uuid": "78b1b2ed-ac6f-460a-bc64-dd9101aa0713",
        "value": "polyoselayer.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:49+00:00",
        "timestamp": "1774015249",
        "to_ids": true,
        "type": "domain",
        "uuid": "7670b803-23d5-4c42-b44c-b95d1f642eb8",
        "value": "ponihacufiorconsulting.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:49+00:00",
        "timestamp": "1774015250",
        "to_ids": true,
        "type": "domain",
        "uuid": "8249e950-348b-4a8c-a646-0a50a617998a",
        "value": "prepnstudioio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:50+00:00",
        "timestamp": "1774015250",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e3a8600-053f-4749-a488-313e1fcc038d",
        "value": "preselayer.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:50+00:00",
        "timestamp": "1774015250",
        "to_ids": true,
        "type": "domain",
        "uuid": "6975ea3f-be79-49dd-8468-3bf531809672",
        "value": "proctorlabs.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:50+00:00",
        "timestamp": "1774015250",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd2dee41-7857-44ad-ad76-96b4a27ebffa",
        "value": "prosishspace.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:50+00:00",
        "timestamp": "1774015250",
        "to_ids": true,
        "type": "domain",
        "uuid": "02876d78-6a26-4448-a404-ca6e6491f029",
        "value": "proteidtech.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:50+00:00",
        "timestamp": "1774015250",
        "to_ids": true,
        "type": "domain",
        "uuid": "76e722a1-87d4-4fa9-b3e8-6097e8357033",
        "value": "pulasanflow.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:50+00:00",
        "timestamp": "1774015250",
        "to_ids": true,
        "type": "domain",
        "uuid": "8707d027-beba-46d7-820a-373f606c689f",
        "value": "putanismbase.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:50+00:00",
        "timestamp": "1774015251",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9e6f2ba-a4be-44d9-9f5f-68c094f7472e",
        "value": "qamokayaaadvisoryinc.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:51+00:00",
        "timestamp": "1774015251",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b4ee9a2-4e53-4394-9242-6033cd5301bc",
        "value": "qituzuvujorsolutions.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:51+00:00",
        "timestamp": "1774015251",
        "to_ids": true,
        "type": "domain",
        "uuid": "2df7011e-d33c-45a1-ac20-9bc6be97ddad",
        "value": "quadraelabs.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:51+00:00",
        "timestamp": "1774015251",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a959b8c-5a27-46ac-aea4-bb64661a739b",
        "value": "ragesaaconsulting88.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:51+00:00",
        "timestamp": "1774015251",
        "to_ids": true,
        "type": "domain",
        "uuid": "e88eb24c-601e-4a86-ad13-c3ee06bd60df",
        "value": "ravigusobiusventures.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:51+00:00",
        "timestamp": "1774015251",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b670c50-6f24-4ab2-89b4-e14609ecd5cf",
        "value": "reflairstudio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:51+00:00",
        "timestamp": "1774015252",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea808617-c879-4d87-9159-064561e11b1e",
        "value": "retapeworks.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:52+00:00",
        "timestamp": "1774015252",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8d02466-1f39-4b51-9af9-3cd83c5af580",
        "value": "risalatech.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:52+00:00",
        "timestamp": "1774015252",
        "to_ids": true,
        "type": "domain",
        "uuid": "9888b041-6324-442b-a127-15331b8927a3",
        "value": "risoseiagroupco.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:52+00:00",
        "timestamp": "1774015252",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a9941ae-568a-4dfe-aee4-be86f26f538b",
        "value": "riyofacaxiaanalytics.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:52+00:00",
        "timestamp": "1774015252",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6f838c2-2566-4fbd-ac1c-ad3c57027f0e",
        "value": "rotateflow.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:52+00:00",
        "timestamp": "1774015252",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fcd51ba-b9a5-4f52-a2cd-eb1be23f143a",
        "value": "royalcloudio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:52+00:00",
        "timestamp": "1774015253",
        "to_ids": true,
        "type": "domain",
        "uuid": "37bddbd8-9650-42c1-a658-a9893f5049c9",
        "value": "ruriheisinvestments.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:53+00:00",
        "timestamp": "1774015253",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2fee37d-5af5-484e-899e-de46b843b5ee",
        "value": "rusoteyonsolutions.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:53+00:00",
        "timestamp": "1774015253",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d631335-929e-4be0-b3e1-22150a9daeeb",
        "value": "sabaiststack.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:53+00:00",
        "timestamp": "1774015253",
        "to_ids": true,
        "type": "domain",
        "uuid": "736465b0-477d-4225-9376-808d5bac0418",
        "value": "sabotierstudio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:53+00:00",
        "timestamp": "1774015253",
        "to_ids": true,
        "type": "domain",
        "uuid": "a502134a-1688-4aac-8820-236af4d2d4cc",
        "value": "sacatraworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:53+00:00",
        "timestamp": "1774015253",
        "to_ids": true,
        "type": "domain",
        "uuid": "26bdb030-177b-482d-b66c-ce784ceca5ca",
        "value": "santeneworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:53+00:00",
        "timestamp": "1774015254",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4b9d7a5-de1c-4c89-846c-518a2dd4603f",
        "value": "saronstack.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:54+00:00",
        "timestamp": "1774015254",
        "to_ids": true,
        "type": "domain",
        "uuid": "a94dabe6-af23-450f-aace-6869db93b500",
        "value": "saroweexservices.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:54+00:00",
        "timestamp": "1774015254",
        "to_ids": true,
        "type": "domain",
        "uuid": "40fa6599-3ff4-4e48-855c-a16139bd92ad",
        "value": "satrapicflow.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:54+00:00",
        "timestamp": "1774015254",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c60e593-105f-4491-a72f-2408c01a9a28",
        "value": "scrfcharworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:54+00:00",
        "timestamp": "1774015254",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d478671-9754-4fd5-8ebf-19e90802e19a",
        "value": "sedotiqavuiscollective.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:54+00:00",
        "timestamp": "1774015255",
        "to_ids": true,
        "type": "domain",
        "uuid": "57b3a583-dab3-4466-a19d-ae57f84deed7",
        "value": "seediestbase.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:55+00:00",
        "timestamp": "1774015255",
        "to_ids": true,
        "type": "domain",
        "uuid": "73ec50fb-7793-435b-92f0-e1c93d419d21",
        "value": "seeklayerco.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:55+00:00",
        "timestamp": "1774015255",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e8fb044-7fae-4fb7-b0db-11de188a019f",
        "value": "serosaelabs.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:55+00:00",
        "timestamp": "1774015255",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc35da9c-bc1a-4b26-8c2d-210e1eda8bf2",
        "value": "shemaalworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:55+00:00",
        "timestamp": "1774015255",
        "to_ids": true,
        "type": "domain",
        "uuid": "8edc3946-fc8e-4688-91ee-47345669ec12",
        "value": "shiismcloud.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:55+00:00",
        "timestamp": "1774015255",
        "to_ids": true,
        "type": "domain",
        "uuid": "67198eb6-aa05-4a82-a2b1-3a58c0cfef16",
        "value": "sintoworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:55+00:00",
        "timestamp": "1774015255",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b8fdff1-e7cb-4eb1-8b41-bad5f707a9fa",
        "value": "sirurakaumcollective.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:56+00:00",
        "timestamp": "1774015256",
        "to_ids": true,
        "type": "domain",
        "uuid": "35fae83a-89c8-4445-b7f6-75c43215a14a",
        "value": "sleepstudio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:56+00:00",
        "timestamp": "1774015256",
        "to_ids": true,
        "type": "domain",
        "uuid": "35427710-0f66-4aaf-9ab9-8218c8fa5be9",
        "value": "sliwerhub.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:56+00:00",
        "timestamp": "1774015256",
        "to_ids": true,
        "type": "domain",
        "uuid": "71fb2861-7ae3-41fb-8eaa-00d3123609d8",
        "value": "soapcloud.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:56+00:00",
        "timestamp": "1774015256",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc9829e3-00e9-481d-8b75-729907279417",
        "value": "solcommunity.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:56+00:00",
        "timestamp": "1774015256",
        "to_ids": true,
        "type": "domain",
        "uuid": "72f26cf3-6a08-4bdf-97cd-bea133767a31",
        "value": "sosajaforuusconsulting.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:56+00:00",
        "timestamp": "1774015256",
        "to_ids": true,
        "type": "domain",
        "uuid": "6006ef3a-2a26-4da3-b3bb-726571c676db",
        "value": "sparklumensynergy.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:56+00:00",
        "timestamp": "1774015257",
        "to_ids": true,
        "type": "domain",
        "uuid": "17a17c99-519e-46ae-8c72-9be8a74fd0f0",
        "value": "speelkenspace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:57+00:00",
        "timestamp": "1774015257",
        "to_ids": true,
        "type": "domain",
        "uuid": "18a7c3bc-c5f6-4790-a718-6b073817b91d",
        "value": "spinnercloud.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:57+00:00",
        "timestamp": "1774015257",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1eb21e1-511d-4aa5-97cb-75c7d8304d18",
        "value": "spinoselabs.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:57+00:00",
        "timestamp": "1774015257",
        "to_ids": true,
        "type": "domain",
        "uuid": "b009a048-fed3-40d2-8a97-417224157dc1",
        "value": "spitboxbase.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:57+00:00",
        "timestamp": "1774015257",
        "to_ids": true,
        "type": "domain",
        "uuid": "e722b4bc-de64-40a1-abb0-74543c71eab2",
        "value": "sportierspace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:57+00:00",
        "timestamp": "1774015257",
        "to_ids": true,
        "type": "domain",
        "uuid": "9360c00c-59e9-44f8-9e62-3b83a95bcc76",
        "value": "squaregrid.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:57+00:00",
        "timestamp": "1774015257",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9acb535-f0fc-43f7-8716-78a2ff19fcee",
        "value": "steercloud.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:58+00:00",
        "timestamp": "1774015258",
        "to_ids": true,
        "type": "domain",
        "uuid": "88885b9a-06d4-4bfa-9520-ec5c6a2ba0a1",
        "value": "stibblerlayer.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:58+00:00",
        "timestamp": "1774015258",
        "to_ids": true,
        "type": "domain",
        "uuid": "99248da5-f901-4116-adf1-334c1132a9a7",
        "value": "striglayer.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:58+00:00",
        "timestamp": "1774015258",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b1329dd-7af4-4ce3-b0dc-b657c15c2276",
        "value": "swapperhub.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:58+00:00",
        "timestamp": "1774015258",
        "to_ids": true,
        "type": "domain",
        "uuid": "f06d9690-9dc5-4059-b5de-7859bcef5708",
        "value": "tangaloagrid.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:58+00:00",
        "timestamp": "1774015258",
        "to_ids": true,
        "type": "domain",
        "uuid": "33cd3781-0565-4ed8-a8eb-23b21ca00b5e",
        "value": "tanuwunaonventures.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:58+00:00",
        "timestamp": "1774015258",
        "to_ids": true,
        "type": "domain",
        "uuid": "7deb2147-6ec0-4c6c-97a7-58c924f08293",
        "value": "tayipoummanagementnet.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:58+00:00",
        "timestamp": "1774015259",
        "to_ids": true,
        "type": "domain",
        "uuid": "b77041ee-0d48-4acd-a9f4-562eef1fe403",
        "value": "tegeceisindustries.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:59+00:00",
        "timestamp": "1774015259",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfbad36f-f583-4738-872e-51911d72de6a",
        "value": "terpenstack.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:59+00:00",
        "timestamp": "1774015259",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa0ff3c5-c810-4cf2-9839-ccf18919d9f6",
        "value": "terrazzospace.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:59+00:00",
        "timestamp": "1774015259",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4f35a93-8c2e-44e9-bbdd-cb954dfedc6b",
        "value": "thymylworks.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:59+00:00",
        "timestamp": "1774015259",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4b00bac-c6ca-47a7-824e-183107584346",
        "value": "tiragecore.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:59+00:00",
        "timestamp": "1774015259",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ea37b8f-1bb8-411c-94e4-ca6951a1a850",
        "value": "titojegomiacapital99.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:00:59+00:00",
        "timestamp": "1774015260",
        "to_ids": true,
        "type": "domain",
        "uuid": "d270adbb-6208-4f51-afa0-54199e2f14a0",
        "value": "toddyizetechco.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:00+00:00",
        "timestamp": "1774015260",
        "to_ids": true,
        "type": "domain",
        "uuid": "f55d7b69-79fc-47d4-82ee-c7f0f754277f",
        "value": "tornadastudio.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:00+00:00",
        "timestamp": "1774015260",
        "to_ids": true,
        "type": "domain",
        "uuid": "43047127-2f69-4cf5-b0cb-96421b03e619",
        "value": "totallerbase.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:00+00:00",
        "timestamp": "1774015260",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2cddd3c-11bb-45d7-86e2-db7274575c00",
        "value": "tovehalumoexadvisoryco.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:00+00:00",
        "timestamp": "1774015260",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef5bcef0-2a25-4bee-b0e0-2495cbf07356",
        "value": "towuxibisconsulting99.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:00+00:00",
        "timestamp": "1774015260",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f154dc2-4d6d-4e82-9ca4-e2ef260a2b9c",
        "value": "turkicstackio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:00+00:00",
        "timestamp": "1774015261",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5dc7d28-a02d-4684-9b49-8566b28122a8",
        "value": "unfleshygrid.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:01+00:00",
        "timestamp": "1774015261",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cffb639-9c11-4dab-b978-fd23b98c48f0",
        "value": "unsaferhub.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:01+00:00",
        "timestamp": "1774015261",
        "to_ids": true,
        "type": "domain",
        "uuid": "13826613-b97f-476d-9239-c94f60096725",
        "value": "vegacoruorsystems.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:01+00:00",
        "timestamp": "1774015261",
        "to_ids": true,
        "type": "domain",
        "uuid": "887ed03f-2c7e-4920-99e6-1872c6359395",
        "value": "velungehub.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:01+00:00",
        "timestamp": "1774015261",
        "to_ids": true,
        "type": "domain",
        "uuid": "69db2d77-7a6e-4b36-893d-d38537c6c1c3",
        "value": "vopadileumholdings.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:01+00:00",
        "timestamp": "1774015261",
        "to_ids": true,
        "type": "domain",
        "uuid": "43a50939-54e7-4a22-9141-642355dadd74",
        "value": "vujavevadisresources.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:01+00:00",
        "timestamp": "1774015261",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a24bed7-2f88-44c1-8961-a60d2fbf1ab5",
        "value": "wattapelayer.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:02+00:00",
        "timestamp": "1774015262",
        "to_ids": true,
        "type": "domain",
        "uuid": "f54d8f7e-c31a-45cb-86c8-000bf415c422",
        "value": "wehemesissystems36.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:02+00:00",
        "timestamp": "1774015262",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd2a3db2-a979-4075-8289-1c19329b3a83",
        "value": "wipeguriisgroup.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:02+00:00",
        "timestamp": "1774015262",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf3a8c81-abc4-4ad8-8083-a793fd017591",
        "value": "withholdlabs.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:02+00:00",
        "timestamp": "1774015262",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5820367-8989-4531-b63c-544cc4e5db1e",
        "value": "wolfishlabs.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:02+00:00",
        "timestamp": "1774015262",
        "to_ids": true,
        "type": "domain",
        "uuid": "49622b58-d4e1-4fff-9c09-85a61bb2c673",
        "value": "wuvoqaorsolutionsinc.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:02+00:00",
        "timestamp": "1774015262",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf13b3a0-f4b0-40ec-87b2-18573d413465",
        "value": "xakamofexservices24.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:02+00:00",
        "timestamp": "1774015263",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b02bd6e-cb8f-4aa6-b74e-f856e3866c17",
        "value": "xayoyuaservices.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:03+00:00",
        "timestamp": "1774015263",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f90bdcb-4786-4d08-b876-a24904b6568a",
        "value": "xazuladubiexinvestments.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:03+00:00",
        "timestamp": "1774015263",
        "to_ids": true,
        "type": "domain",
        "uuid": "98d0d184-a914-4384-9fdb-e9fd26b1dd23",
        "value": "xebamodiaservices.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:03+00:00",
        "timestamp": "1774015263",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fb2f828-5b82-42c0-a6f4-40b85ceca4cb",
        "value": "xevagugoexsolutionsco.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:03+00:00",
        "timestamp": "1774015263",
        "to_ids": true,
        "type": "domain",
        "uuid": "648e1914-65b6-44d1-bc0a-e516f13c196d",
        "value": "xumaxuhoroperations.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:03+00:00",
        "timestamp": "1774015263",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6d554d2-2bf6-498c-9329-a235077b66d7",
        "value": "xutusogiusconsultingnet.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:03+00:00",
        "timestamp": "1774015264",
        "to_ids": true,
        "type": "domain",
        "uuid": "9675f6e7-09f7-4f3d-8703-c3784d54f20b",
        "value": "xuwawuwasisindustries.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:04+00:00",
        "timestamp": "1774015264",
        "to_ids": true,
        "type": "domain",
        "uuid": "abb9aa62-7df3-4f04-9dbe-c19f9e9bbefb",
        "value": "yagivudatorpartners.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:04+00:00",
        "timestamp": "1774015264",
        "to_ids": true,
        "type": "domain",
        "uuid": "f14c9117-ebf7-4abf-82c1-7c209ae7b818",
        "value": "yagufeonservices.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:04+00:00",
        "timestamp": "1774015264",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e43a989-f16e-4542-a74a-5ce418e7e75a",
        "value": "yauponlabs.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:04+00:00",
        "timestamp": "1774015264",
        "to_ids": true,
        "type": "domain",
        "uuid": "93c44975-1fda-4780-9ddc-0d16fb38a0df",
        "value": "yicapizefaonanalytics.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:04+00:00",
        "timestamp": "1774015264",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecbbffc8-056b-403b-9ffd-94c6149168bb",
        "value": "youraislopbores.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:04+00:00",
        "timestamp": "1774015265",
        "to_ids": true,
        "type": "domain",
        "uuid": "00d47b39-039d-4bb1-890f-bd9d513d4891",
        "value": "yuxuqekigaexservices.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:05+00:00",
        "timestamp": "1774015265",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfb417e3-1a4e-4af4-a539-be351549dad5",
        "value": "zantiotelayer.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:05+00:00",
        "timestamp": "1774015265",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c8f5f10-cca8-48d8-9112-e6299026e105",
        "value": "zewadotiquonventures.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:05+00:00",
        "timestamp": "1774015265",
        "to_ids": true,
        "type": "domain",
        "uuid": "95a11afa-021b-4a86-a30c-584222a8f03e",
        "value": "zexoqerusresources.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:05+00:00",
        "timestamp": "1774015265",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7aee761-1d85-45ea-a803-a03999cfe2bb",
        "value": "zipomiciwiaresources.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:05+00:00",
        "timestamp": "1774015265",
        "to_ids": true,
        "type": "domain",
        "uuid": "80432dab-f25f-490c-b7ec-d85ed5a86497",
        "value": "zobacasaconsulting.forum",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:05+00:00",
        "timestamp": "1774015265",
        "to_ids": true,
        "type": "domain",
        "uuid": "fdd12ccd-e7d1-487f-b4d8-a7f908ed459b",
        "value": "zosomokuduiaadvisoryltd.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:05+00:00",
        "timestamp": "1774015266",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac2613fd-3984-4374-94bf-0f4cde4db2c1",
        "value": "zozipehupuonadvisorynet.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:06+00:00",
        "timestamp": "1774015266",
        "to_ids": true,
        "type": "domain",
        "uuid": "375e7838-8762-4afe-b51a-f0aca8677f26",
        "value": "zupejiiainvestments.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T14:01:06+00:00",
        "timestamp": "1774015266",
        "to_ids": true,
        "type": "domain",
        "uuid": "459ad068-fd42-43c4-acbb-924181bf27e5",
        "value": "zygosegrid.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:04+00:00",
        "timestamp": "1774018805",
        "to_ids": false,
        "type": "url",
        "uuid": "080ecfee-86f9-40b8-8690-004a859b59b5",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c0e6b435db4cad6ac9a0696f35392eaa07a058a4",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:05+00:00",
        "timestamp": "1774018805",
        "to_ids": false,
        "type": "url",
        "uuid": "f5c9e3d1-f886-44b7-8fb9-43057d7e1df8",
        "value": "https://x.com/volrant136/status/2035006506324959469",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:05+00:00",
        "timestamp": "1774018805",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa897360-761c-4459-a027-8eb7089e7bb8",
        "value": "funisti.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:05+00:00",
        "timestamp": "1774018806",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5b6f823-5107-4cdf-b262-bb23eb22d3b9",
        "value": "vhbgruop.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:06+00:00",
        "timestamp": "1774018806",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cc56a9a-db38-473e-a770-d273c3b7672f",
        "value": "zoom-meeting-video-beignet-e41432.netlify.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:06+00:00",
        "timestamp": "1774018806",
        "to_ids": false,
        "type": "url",
        "uuid": "3e269f46-d1a6-4250-8984-a877ba4b30e1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/983b5af4d21cdd6c06dc755d20fd4f2dc79bf7c0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:06+00:00",
        "timestamp": "1774018806",
        "to_ids": false,
        "type": "url",
        "uuid": "bac0342e-c125-49ec-ab35-92d972409c90",
        "value": "https://x.com/ShanHolo/status/2034985128577958227",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:06+00:00",
        "timestamp": "1774018806",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cb5b6a3-a307-4614-9f84-a6faea7a59bc",
        "value": "2q.appim-cn-hub-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:06+00:00",
        "timestamp": "1774018806",
        "to_ids": true,
        "type": "domain",
        "uuid": "59c39a72-ea82-4bff-bc83-d888f4577c35",
        "value": "6c.wap-online-net-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:06+00:00",
        "timestamp": "1774018807",
        "to_ids": true,
        "type": "domain",
        "uuid": "074fc400-2f83-4f0e-bd5a-1a8622300406",
        "value": "6g.imsite-pro-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:07+00:00",
        "timestamp": "1774018807",
        "to_ids": true,
        "type": "domain",
        "uuid": "8db0278c-dfb4-417c-82f1-ca56cd415b6c",
        "value": "8p.webhub-live-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:07+00:00",
        "timestamp": "1774018807",
        "to_ids": true,
        "type": "domain",
        "uuid": "1972060c-af82-43f2-8f1e-19e26d1e9208",
        "value": "8y.linkapp-net-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:07+00:00",
        "timestamp": "1774018807",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0d57355-c595-4bc6-92d9-4c73414b9648",
        "value": "9a.ag-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:07+00:00",
        "timestamp": "1774018807",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0a75486-86d6-46be-a0c1-ff4d61037ebd",
        "value": "9g.am-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:07+00:00",
        "timestamp": "1774018807",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd926fca-1150-43c3-a317-82b035cbf833",
        "value": "9j.ap-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:07+00:00",
        "timestamp": "1774018808",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d4ac5c0-2a08-42a5-8564-f9b2f6106b5b",
        "value": "a-app-b-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:08+00:00",
        "timestamp": "1774018808",
        "to_ids": true,
        "type": "domain",
        "uuid": "53f01c5b-2ee3-49c2-9f6d-1ec56614365f",
        "value": "a-app-c-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:08+00:00",
        "timestamp": "1774018808",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee001101-8f32-43cd-8b10-49aca4bbafe1",
        "value": "a-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:08+00:00",
        "timestamp": "1774018808",
        "to_ids": true,
        "type": "domain",
        "uuid": "62db8041-5dd7-44f1-82df-0cff2d396ac8",
        "value": "a-i-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:08+00:00",
        "timestamp": "1774018808",
        "to_ids": true,
        "type": "domain",
        "uuid": "07598ea3-308f-4830-bff4-76e653a7655b",
        "value": "a-im-b-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:08+00:00",
        "timestamp": "1774018808",
        "to_ids": true,
        "type": "domain",
        "uuid": "f377c6a4-9b53-4549-92b9-46a754bf7f59",
        "value": "a-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:08+00:00",
        "timestamp": "1774018809",
        "to_ids": true,
        "type": "domain",
        "uuid": "2394a2e4-93b3-4c49-90cc-06e9364982a6",
        "value": "a-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:09+00:00",
        "timestamp": "1774018809",
        "to_ids": true,
        "type": "domain",
        "uuid": "9477add8-8944-48f5-a119-32251ae2bf50",
        "value": "a-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:09+00:00",
        "timestamp": "1774018809",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bb6898f-d85c-49b9-8fd3-b9e722ce315d",
        "value": "a-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:09+00:00",
        "timestamp": "1774018809",
        "to_ids": true,
        "type": "domain",
        "uuid": "1aa71886-ae08-40c2-bece-39bb854754b3",
        "value": "a-wap-b-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:09+00:00",
        "timestamp": "1774018809",
        "to_ids": true,
        "type": "domain",
        "uuid": "043ee84b-340a-4ae1-92e9-bd428626cb8e",
        "value": "a-web-b-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:09+00:00",
        "timestamp": "1774018809",
        "to_ids": true,
        "type": "domain",
        "uuid": "472fe567-d502-4591-be2b-71ddbd253d7e",
        "value": "a-z-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:09+00:00",
        "timestamp": "1774018809",
        "to_ids": true,
        "type": "domain",
        "uuid": "55d041c1-92c2-4a4b-b5d7-0c38805287ad",
        "value": "abcd.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:10+00:00",
        "timestamp": "1774018810",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fe0fe58-741d-497d-a586-38720098b708",
        "value": "abx-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:10+00:00",
        "timestamp": "1774018810",
        "to_ids": true,
        "type": "domain",
        "uuid": "842e47e0-8489-49c7-9dfa-9d6625f79296",
        "value": "acd-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:10+00:00",
        "timestamp": "1774018810",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2a86d79-ab44-45b1-aada-c1e31d6241f4",
        "value": "adb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:10+00:00",
        "timestamp": "1774018810",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dfd427c-70c2-4172-8743-e10072bb8c16",
        "value": "adb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:10+00:00",
        "timestamp": "1774018810",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed478449-d501-4346-a755-1b9e9c1d08d5",
        "value": "add-bkd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:10+00:00",
        "timestamp": "1774018810",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e8780cf-4794-4daa-8ba2-69deadcc67d5",
        "value": "add-bqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:10+00:00",
        "timestamp": "1774018811",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8090994-8b4a-4607-9413-623e78b231cf",
        "value": "add-bvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:11+00:00",
        "timestamp": "1774018811",
        "to_ids": true,
        "type": "domain",
        "uuid": "13a23a4d-3362-4453-9754-5a78ab941243",
        "value": "add-csl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:11+00:00",
        "timestamp": "1774018811",
        "to_ids": true,
        "type": "domain",
        "uuid": "578b8202-cebf-49df-952b-18da316e037c",
        "value": "add-dxp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:11+00:00",
        "timestamp": "1774018811",
        "to_ids": true,
        "type": "domain",
        "uuid": "61c645dd-72a1-45d1-864c-43105bd71355",
        "value": "add-fji-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:11+00:00",
        "timestamp": "1774018811",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3d5252b-823c-4aec-9d60-19bbac389756",
        "value": "add-gdp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:11+00:00",
        "timestamp": "1774018811",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb25d884-2a24-4ac7-80f7-62c2a82c30de",
        "value": "add-gsw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:11+00:00",
        "timestamp": "1774018811",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab6b82d2-08e8-4cd5-b2dd-355f83111b63",
        "value": "add-hrp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:11+00:00",
        "timestamp": "1774018812",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bc36f24-8478-4ab0-b360-7f1f9592d566",
        "value": "add-jka-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:12+00:00",
        "timestamp": "1774018812",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dbb8b7a-da8c-46ef-ac4a-f12eaa842d2a",
        "value": "add-jls-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:12+00:00",
        "timestamp": "1774018812",
        "to_ids": true,
        "type": "domain",
        "uuid": "e869afe3-4cbc-4421-b776-b011d6ea7f73",
        "value": "add-jow-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:12+00:00",
        "timestamp": "1774018812",
        "to_ids": true,
        "type": "domain",
        "uuid": "582f39cc-431f-4c76-9e86-c7b3d515ed5e",
        "value": "add-kia-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:12+00:00",
        "timestamp": "1774018812",
        "to_ids": true,
        "type": "domain",
        "uuid": "5665ecf6-c218-46ca-8432-f094ac1f9d94",
        "value": "add-kpe-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:12+00:00",
        "timestamp": "1774018812",
        "to_ids": true,
        "type": "domain",
        "uuid": "47cb078f-2d40-4aa9-b0bf-ae4cccb72d5a",
        "value": "add-lcz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:12+00:00",
        "timestamp": "1774018813",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b5e1b70-a5a1-4516-8288-411f65442fb9",
        "value": "add-lgp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:13+00:00",
        "timestamp": "1774018813",
        "to_ids": true,
        "type": "domain",
        "uuid": "12214f55-9e2a-4d95-9993-701323d98389",
        "value": "add-lza-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:13+00:00",
        "timestamp": "1774018813",
        "to_ids": true,
        "type": "domain",
        "uuid": "baa9d079-df86-4bcb-b3c3-8c7406d15b33",
        "value": "add-nue-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:13+00:00",
        "timestamp": "1774018813",
        "to_ids": true,
        "type": "domain",
        "uuid": "c14a041b-8dfe-4d6c-b5a8-2aec50195a78",
        "value": "add-nuh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:13+00:00",
        "timestamp": "1774018813",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5da04dc-4921-4740-8cc0-26604c1eea1a",
        "value": "add-oxf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:13+00:00",
        "timestamp": "1774018813",
        "to_ids": true,
        "type": "domain",
        "uuid": "57d73682-6fb0-48a8-af7d-b54761e8412b",
        "value": "add-pmy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:13+00:00",
        "timestamp": "1774018813",
        "to_ids": true,
        "type": "domain",
        "uuid": "947b1024-d848-486e-8eee-df2bf5596056",
        "value": "add-rwx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:13+00:00",
        "timestamp": "1774018814",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1e8d3bc-298d-49b2-b39a-f79ce6b2b68e",
        "value": "add-tdz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:14+00:00",
        "timestamp": "1774018814",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb933620-f8a0-478b-8214-68321d7c3e9c",
        "value": "add-tjq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:14+00:00",
        "timestamp": "1774018814",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bc1052e-20b3-4886-b120-d7f10cad5a7f",
        "value": "add-tpz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:14+00:00",
        "timestamp": "1774018814",
        "to_ids": true,
        "type": "domain",
        "uuid": "e77fc433-7116-4146-ae7a-f90ee96cf35a",
        "value": "add-uro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:14+00:00",
        "timestamp": "1774018814",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee448fbe-7581-4717-add2-2348ace6d49b",
        "value": "add-vce-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:14+00:00",
        "timestamp": "1774018814",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5bd17d1-3a7c-41ed-ba86-db354626fa73",
        "value": "add-vpi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:14+00:00",
        "timestamp": "1774018815",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a824369-9fd3-4f61-bfb7-2d004b2b1722",
        "value": "add-vub-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:15+00:00",
        "timestamp": "1774018815",
        "to_ids": true,
        "type": "domain",
        "uuid": "85dc00fc-a034-458d-8fcc-0e60255ba9c6",
        "value": "add-vyu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:15+00:00",
        "timestamp": "1774018815",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd17b376-d17e-41af-918c-371cb7a7661e",
        "value": "add-wkh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:15+00:00",
        "timestamp": "1774018815",
        "to_ids": true,
        "type": "domain",
        "uuid": "69f06985-48db-401e-9505-4af36432960b",
        "value": "add-wto-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:15+00:00",
        "timestamp": "1774018815",
        "to_ids": true,
        "type": "domain",
        "uuid": "e158dc65-6066-4494-8178-1a54c39f551b",
        "value": "add-xra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:15+00:00",
        "timestamp": "1774018815",
        "to_ids": true,
        "type": "domain",
        "uuid": "0474202a-fe31-4527-bc29-5b3e1e5d832e",
        "value": "add-zgi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:15+00:00",
        "timestamp": "1774018815",
        "to_ids": true,
        "type": "domain",
        "uuid": "b61fa3b4-f0db-416b-93ae-a7e9acad8f76",
        "value": "add-zqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:15+00:00",
        "timestamp": "1774018816",
        "to_ids": true,
        "type": "domain",
        "uuid": "46f9bd03-2153-4d52-8ff4-9fb22a2fcab3",
        "value": "add-zvc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:16+00:00",
        "timestamp": "1774018816",
        "to_ids": true,
        "type": "domain",
        "uuid": "83027773-ea86-49a1-b2ca-9908c94d869a",
        "value": "ade-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:16+00:00",
        "timestamp": "1774018816",
        "to_ids": true,
        "type": "domain",
        "uuid": "600a0a91-5d97-4370-979d-e99b67f15f74",
        "value": "ag-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:16+00:00",
        "timestamp": "1774018816",
        "to_ids": true,
        "type": "domain",
        "uuid": "32e985e8-db23-43e0-9a6b-e82a854d0fb5",
        "value": "agh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:16+00:00",
        "timestamp": "1774018816",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d75ed86-4439-4398-9d77-4e4484cdca72",
        "value": "ajk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:16+00:00",
        "timestamp": "1774018816",
        "to_ids": true,
        "type": "domain",
        "uuid": "86295bdb-8880-4256-8407-e97e24e76d40",
        "value": "alm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:16+00:00",
        "timestamp": "1774018817",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5eabc42-fa90-4c0f-ad75-decbde25c5ec",
        "value": "am-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:17+00:00",
        "timestamp": "1774018817",
        "to_ids": true,
        "type": "domain",
        "uuid": "8da941ae-9415-4aea-92d2-42f725419da6",
        "value": "anp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:17+00:00",
        "timestamp": "1774018817",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f848dc5-5f7d-4c7e-9de1-7388524d6138",
        "value": "ap-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:17+00:00",
        "timestamp": "1774018817",
        "to_ids": true,
        "type": "domain",
        "uuid": "692f7df6-f350-472c-939f-80fb3ace8345",
        "value": "api-web-kr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:17+00:00",
        "timestamp": "1774018817",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6ca4e70-3d5f-4e80-a043-2241e6752127",
        "value": "app-bkd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:17+00:00",
        "timestamp": "1774018817",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0f0ced9-322e-4944-8c45-b3196c74e52d",
        "value": "app-bvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:18+00:00",
        "timestamp": "1774018818",
        "to_ids": true,
        "type": "domain",
        "uuid": "7324fb32-d1ae-4776-a984-4fcdfc9daf26",
        "value": "app-connect-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:18+00:00",
        "timestamp": "1774018818",
        "to_ids": true,
        "type": "domain",
        "uuid": "033d9ea5-9932-483d-9ee4-ad9c22987dca",
        "value": "app-corex-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:18+00:00",
        "timestamp": "1774018818",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d79f4ae-0f97-45a5-bbde-7f87e1620257",
        "value": "app-csl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:18+00:00",
        "timestamp": "1774018818",
        "to_ids": true,
        "type": "domain",
        "uuid": "25d94470-be12-4285-a674-ec410664d229",
        "value": "app-dax-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:18+00:00",
        "timestamp": "1774018818",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef45e90d-308f-4d11-826a-82cd2c413c75",
        "value": "app-dxp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:18+00:00",
        "timestamp": "1774018818",
        "to_ids": true,
        "type": "domain",
        "uuid": "157b7055-ddf6-4fe2-a20f-014632891554",
        "value": "app-ekd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:18+00:00",
        "timestamp": "1774018819",
        "to_ids": true,
        "type": "domain",
        "uuid": "bafdd137-c3a2-448d-a603-835aded8d812",
        "value": "app-fji-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:19+00:00",
        "timestamp": "1774018819",
        "to_ids": true,
        "type": "domain",
        "uuid": "05a3ba35-5983-43a8-b069-82c86e9a793b",
        "value": "app-fnr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:19+00:00",
        "timestamp": "1774018819",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe1a6367-689d-4760-ba46-bd4b46541321",
        "value": "app-fwt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:19+00:00",
        "timestamp": "1774018819",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1d7cda9-1cd4-4510-9435-294828610d17",
        "value": "app-gkh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:19+00:00",
        "timestamp": "1774018819",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7f19fe3-085c-4378-bdd6-d47d23ce2b6f",
        "value": "app-gsw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:19+00:00",
        "timestamp": "1774018819",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8f750bc-1752-43c8-9c52-726ff87cf55b",
        "value": "app-horizon-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:19+00:00",
        "timestamp": "1774018820",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d24ac2b-cf56-42ff-a529-061d0263038a",
        "value": "app-hrp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:20+00:00",
        "timestamp": "1774018820",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e98fb87-6408-4683-91cc-192ba92e8ffa",
        "value": "app-im-org-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:20+00:00",
        "timestamp": "1774018820",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f8704ed-5577-4f1e-a1fb-5986ed2a7c52",
        "value": "app-jka-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:20+00:00",
        "timestamp": "1774018820",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc2654ce-4eeb-4411-8a9d-e6d46baef694",
        "value": "app-jls-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:20+00:00",
        "timestamp": "1774018820",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ce7fa58-9a32-4225-aab0-7949c819afb8",
        "value": "app-jow-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:20+00:00",
        "timestamp": "1774018820",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e27ea70-4129-4ebf-8df4-18244734671b",
        "value": "app-lcz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:20+00:00",
        "timestamp": "1774018820",
        "to_ids": true,
        "type": "domain",
        "uuid": "bef76caa-c4ce-4fa9-ad8e-a52a0eaf4cd3",
        "value": "app-lgp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:20+00:00",
        "timestamp": "1774018821",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c7e527b-1ee0-4c00-9b4d-0a868c7c603e",
        "value": "app-mate-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:21+00:00",
        "timestamp": "1774018821",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ed60b9d-7deb-459e-98c7-6352b6fab67b",
        "value": "app-mfd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:21+00:00",
        "timestamp": "1774018821",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6f58fa2-4f82-4613-9211-4c0fad98f6b2",
        "value": "app-mhs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:21+00:00",
        "timestamp": "1774018821",
        "to_ids": true,
        "type": "domain",
        "uuid": "054f324b-3694-4641-86d0-8fe159e97e4a",
        "value": "app-msg-net-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:21+00:00",
        "timestamp": "1774018821",
        "to_ids": true,
        "type": "domain",
        "uuid": "fca72213-f90d-402b-8d28-df702dd4802d",
        "value": "app-msg-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:21+00:00",
        "timestamp": "1774018822",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f92deec-5087-4c0b-8232-99cf137bae82",
        "value": "app-nue-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:22+00:00",
        "timestamp": "1774018822",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f760b55-339d-4191-83db-d5f46b1e6052",
        "value": "app-oaq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:22+00:00",
        "timestamp": "1774018822",
        "to_ids": true,
        "type": "domain",
        "uuid": "3092a2f8-c7d3-4ce8-9d44-6a37a43d85c1",
        "value": "app-online-hk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:22+00:00",
        "timestamp": "1774018822",
        "to_ids": true,
        "type": "domain",
        "uuid": "d745d761-0e2f-4a67-ac6e-879a61b9ec7d",
        "value": "app-oxf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:22+00:00",
        "timestamp": "1774018822",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cb3c243-36a8-4bb7-a610-a3bce586c0a5",
        "value": "app-pmy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:22+00:00",
        "timestamp": "1774018822",
        "to_ids": true,
        "type": "domain",
        "uuid": "0705bc88-afd8-45ee-89dc-5373d7e3d2c1",
        "value": "app-sjl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:22+00:00",
        "timestamp": "1774018823",
        "to_ids": true,
        "type": "domain",
        "uuid": "978ebb85-aabf-480d-bbc6-01198f8ce3f6",
        "value": "app-smh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:23+00:00",
        "timestamp": "1774018823",
        "to_ids": true,
        "type": "domain",
        "uuid": "77534131-74a4-41b9-8d45-1c72b7cceac7",
        "value": "app-tdz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:23+00:00",
        "timestamp": "1774018823",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d846871-09f1-493a-9cbe-48cf5bf3c46e",
        "value": "app-un-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:23+00:00",
        "timestamp": "1774018823",
        "to_ids": true,
        "type": "domain",
        "uuid": "94f4f5a5-ab1d-4648-b88b-fcf0e431a404",
        "value": "app-vo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:23+00:00",
        "timestamp": "1774018823",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d3912ee-e309-422b-acc7-7b6f5f5875b8",
        "value": "app-vpi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:23+00:00",
        "timestamp": "1774018823",
        "to_ids": true,
        "type": "domain",
        "uuid": "e474d4e9-20dc-4a33-849a-6c05179cbc7c",
        "value": "app-vub-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:23+00:00",
        "timestamp": "1774018823",
        "to_ids": true,
        "type": "domain",
        "uuid": "6428fadc-f16b-41e9-af9e-a1a835a97ffd",
        "value": "app-vwy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:23+00:00",
        "timestamp": "1774018824",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd670c8e-49b5-4de2-ab39-b4175235866e",
        "value": "app-vyu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:24+00:00",
        "timestamp": "1774018824",
        "to_ids": true,
        "type": "domain",
        "uuid": "85049184-b66e-4cc5-92a7-8a6a0d975f30",
        "value": "app-wap-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:24+00:00",
        "timestamp": "1774018824",
        "to_ids": true,
        "type": "domain",
        "uuid": "5946fc13-0494-4290-aebe-b1c49e3df3a8",
        "value": "app-web-eu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:24+00:00",
        "timestamp": "1774018824",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa79b924-bd6b-4c22-a71e-2b6798af4de5",
        "value": "app-web-hk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:24+00:00",
        "timestamp": "1774018824",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d0e3389-3a01-4036-9298-e1067188317b",
        "value": "app-web-live-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:24+00:00",
        "timestamp": "1774018824",
        "to_ids": true,
        "type": "domain",
        "uuid": "851e8c4d-c8d9-4d47-962e-b97f2fe4310e",
        "value": "app-wkh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:24+00:00",
        "timestamp": "1774018825",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7c42f45-14a3-4eec-8fb9-b14499035012",
        "value": "app-wp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:25+00:00",
        "timestamp": "1774018825",
        "to_ids": true,
        "type": "domain",
        "uuid": "b90d5458-c685-4d4f-9ae5-4e604c67b9ab",
        "value": "app-wto-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:25+00:00",
        "timestamp": "1774018825",
        "to_ids": true,
        "type": "domain",
        "uuid": "55140c74-146b-4e95-80c7-03dd9a68bf5b",
        "value": "app-xq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:25+00:00",
        "timestamp": "1774018825",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5a2a23b-a565-4ff6-b48d-31dcc2938f8f",
        "value": "app-xra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:25+00:00",
        "timestamp": "1774018825",
        "to_ids": true,
        "type": "domain",
        "uuid": "30dde755-754a-418d-b58f-5ff130f17cbd",
        "value": "app-yr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:25+00:00",
        "timestamp": "1774018825",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9fb2b86-08fb-4c7f-ab52-5594651c9ec8",
        "value": "app-zcr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:25+00:00",
        "timestamp": "1774018825",
        "to_ids": true,
        "type": "domain",
        "uuid": "23106d3c-9c2a-4a58-a720-829c6130e783",
        "value": "app-zgi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:26+00:00",
        "timestamp": "1774018826",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6fa7be6-27b9-4392-bab4-607b8cadc739",
        "value": "app-zqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:26+00:00",
        "timestamp": "1774018826",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a065273-5a26-46c6-abae-0ef998a5a3e9",
        "value": "app-zvc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:26+00:00",
        "timestamp": "1774018826",
        "to_ids": true,
        "type": "domain",
        "uuid": "a745dd97-2e54-41be-a6ce-30742419800a",
        "value": "appchat-pro-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:26+00:00",
        "timestamp": "1774018826",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa5cca40-5529-4960-828f-72103003b00b",
        "value": "appim-cn-hub-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:26+00:00",
        "timestamp": "1774018826",
        "to_ids": true,
        "type": "domain",
        "uuid": "d32ebe45-b739-44ec-b5bf-5202cc1833ea",
        "value": "apps-a-b-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:26+00:00",
        "timestamp": "1774018826",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7462bd4-5835-4d80-aba7-2c6e890b54d9",
        "value": "apps-a-e-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:26+00:00",
        "timestamp": "1774018827",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2068508-37d5-43ee-b21b-c4294c42f812",
        "value": "apps-b-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:27+00:00",
        "timestamp": "1774018827",
        "to_ids": true,
        "type": "domain",
        "uuid": "5619c832-2a76-4c7c-9111-09ac1691a87c",
        "value": "apps-c-d-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:27+00:00",
        "timestamp": "1774018827",
        "to_ids": true,
        "type": "domain",
        "uuid": "70d0882d-aea5-4ffb-b4e6-9eed1f1e86d4",
        "value": "apps-c-g-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:27+00:00",
        "timestamp": "1774018827",
        "to_ids": true,
        "type": "domain",
        "uuid": "22a98a94-e39b-4685-b525-612ef07e5e04",
        "value": "apps-center-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:27+00:00",
        "timestamp": "1774018827",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c3c1466-b434-433b-b5d9-f0fe16a6029a",
        "value": "apps-e-i-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:27+00:00",
        "timestamp": "1774018827",
        "to_ids": true,
        "type": "domain",
        "uuid": "658ac04c-84fb-4246-a776-e799a544d0a7",
        "value": "apps-f-g-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:27+00:00",
        "timestamp": "1774018827",
        "to_ids": true,
        "type": "domain",
        "uuid": "35fa098d-dbd6-44fb-a8ea-b3bcef4ad6ce",
        "value": "apps-f-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:27+00:00",
        "timestamp": "1774018828",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b944afe-1ba0-4694-831a-3b1953054473",
        "value": "apps-g-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:28+00:00",
        "timestamp": "1774018828",
        "to_ids": true,
        "type": "domain",
        "uuid": "229a239c-ed12-49a7-9e0e-46cc33030a7c",
        "value": "apps-grid-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:28+00:00",
        "timestamp": "1774018828",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2ac0258-122e-43fb-9e12-25df36672a36",
        "value": "apps-h-i-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:28+00:00",
        "timestamp": "1774018828",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab1fd4b8-a765-419f-893c-f3623e611a8b",
        "value": "apps-j-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:28+00:00",
        "timestamp": "1774018828",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4c0be2a-9a76-44f0-aae2-a4c55ee06b61",
        "value": "apps-k-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:28+00:00",
        "timestamp": "1774018828",
        "to_ids": true,
        "type": "domain",
        "uuid": "63ee108e-68f2-45c0-b251-3aa74a01a259",
        "value": "apps-l-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:28+00:00",
        "timestamp": "1774018829",
        "to_ids": true,
        "type": "domain",
        "uuid": "d51923c9-205d-4722-a585-0392fc0bb6cb",
        "value": "apps-lab-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:29+00:00",
        "timestamp": "1774018829",
        "to_ids": true,
        "type": "domain",
        "uuid": "e01e61cf-2ab7-4806-9e22-1c7a5b061864",
        "value": "apps-m-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:29+00:00",
        "timestamp": "1774018829",
        "to_ids": true,
        "type": "domain",
        "uuid": "efeadc4c-3603-4fc6-b102-dddd40adc955",
        "value": "apps-m-r-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:29+00:00",
        "timestamp": "1774018829",
        "to_ids": true,
        "type": "domain",
        "uuid": "31a31db2-ac12-4aa4-a73d-b70624a6e03a",
        "value": "apps-n-s-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:29+00:00",
        "timestamp": "1774018829",
        "to_ids": true,
        "type": "domain",
        "uuid": "277cdc3b-3546-479d-a3ce-9e5ff86b6ea7",
        "value": "apps-o-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:29+00:00",
        "timestamp": "1774018829",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c7cef55-3c42-4685-b171-8594e76a761a",
        "value": "apps-o-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:29+00:00",
        "timestamp": "1774018829",
        "to_ids": true,
        "type": "domain",
        "uuid": "24cb2446-cabd-4759-aaca-73512472cd19",
        "value": "apps-o-t-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:30+00:00",
        "timestamp": "1774018830",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e36edca-6cf0-4d8e-bd49-9f227c34a60c",
        "value": "apps-p-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:30+00:00",
        "timestamp": "1774018830",
        "to_ids": true,
        "type": "domain",
        "uuid": "958fea08-559e-4cd2-842e-e1590e5fef91",
        "value": "apps-p-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:30+00:00",
        "timestamp": "1774018830",
        "to_ids": true,
        "type": "domain",
        "uuid": "24963eac-f619-4ba5-a70c-9057a2962b74",
        "value": "apps-p-u-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:30+00:00",
        "timestamp": "1774018830",
        "to_ids": true,
        "type": "domain",
        "uuid": "582d5a4f-5a1c-4aea-ac8d-8e1377a559aa",
        "value": "apps-point-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:30+00:00",
        "timestamp": "1774018830",
        "to_ids": true,
        "type": "domain",
        "uuid": "91f4badc-c15e-44a1-a2c4-71868c27aee3",
        "value": "apps-q-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:30+00:00",
        "timestamp": "1774018830",
        "to_ids": true,
        "type": "domain",
        "uuid": "fad61112-b893-410b-a8d0-54eeaac25693",
        "value": "apps-q-u-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:30+00:00",
        "timestamp": "1774018831",
        "to_ids": true,
        "type": "domain",
        "uuid": "cadc9224-fec8-4d8d-b0bb-f614401d976c",
        "value": "apps-r-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:31+00:00",
        "timestamp": "1774018831",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc9f2eaa-189b-4bb1-b055-5812c2803ed5",
        "value": "apps-r-w-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:31+00:00",
        "timestamp": "1774018831",
        "to_ids": true,
        "type": "domain",
        "uuid": "17c208de-54c2-48dd-b30c-ea095c890ea0",
        "value": "apps-s-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:31+00:00",
        "timestamp": "1774018831",
        "to_ids": true,
        "type": "domain",
        "uuid": "856ca5de-0345-4cee-8046-eda06440b1a2",
        "value": "apps-t-u-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:31+00:00",
        "timestamp": "1774018831",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cf6dedb-b374-4757-ab8a-4a24a31cd386",
        "value": "apps-t-x-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:31+00:00",
        "timestamp": "1774018831",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fadd230-fd05-429e-b5e3-1adca9913f6d",
        "value": "apps-t-y-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:31+00:00",
        "timestamp": "1774018831",
        "to_ids": true,
        "type": "domain",
        "uuid": "1563d40a-4e8f-48fc-9377-f42afdd951a4",
        "value": "apps-u-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:32+00:00",
        "timestamp": "1774018832",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d5fac39-51a6-4087-8584-b8e0763f8164",
        "value": "apps-u-z-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:32+00:00",
        "timestamp": "1774018832",
        "to_ids": true,
        "type": "domain",
        "uuid": "18435625-9d62-4859-b798-f52f0561d1fa",
        "value": "apps-v-z-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:32+00:00",
        "timestamp": "1774018832",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe24097b-0a29-4418-9891-0456a02588c3",
        "value": "apps-w-a-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:32+00:00",
        "timestamp": "1774018832",
        "to_ids": true,
        "type": "domain",
        "uuid": "a664bf89-a175-4c6c-8371-422e88a3c2fb",
        "value": "apps-w-x-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:32+00:00",
        "timestamp": "1774018832",
        "to_ids": true,
        "type": "domain",
        "uuid": "8161c7a4-31c9-4024-b986-f30c65f7684e",
        "value": "apps-wave-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:32+00:00",
        "timestamp": "1774018832",
        "to_ids": true,
        "type": "domain",
        "uuid": "f548052f-302d-4c42-be46-8d9edba60e7e",
        "value": "apps-x-c-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:32+00:00",
        "timestamp": "1774018833",
        "to_ids": true,
        "type": "domain",
        "uuid": "99426844-1a22-4022-b996-897c8cd8c7a4",
        "value": "apps-y-z-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:33+00:00",
        "timestamp": "1774018833",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d5fe9b0-335f-4106-88dd-1b209d73196b",
        "value": "apps-zone-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:33+00:00",
        "timestamp": "1774018833",
        "to_ids": true,
        "type": "domain",
        "uuid": "832bf09d-7927-4fe3-b794-238b072d9cc7",
        "value": "appsite-link-hk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:33+00:00",
        "timestamp": "1774018833",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5edcce4-b051-4bcb-ac8f-8a83f36c189f",
        "value": "appweb-cn-net-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:33+00:00",
        "timestamp": "1774018833",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ffdb741-d961-4955-a44a-b31ce91e4bbf",
        "value": "aqr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:33+00:00",
        "timestamp": "1774018833",
        "to_ids": true,
        "type": "domain",
        "uuid": "67a5c673-406d-431d-b2ab-4bfd737fdda1",
        "value": "aqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:33+00:00",
        "timestamp": "1774018834",
        "to_ids": true,
        "type": "domain",
        "uuid": "f53cca5e-e4dc-4eb0-88b0-b698befd6f0a",
        "value": "ast-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:34+00:00",
        "timestamp": "1774018834",
        "to_ids": true,
        "type": "domain",
        "uuid": "62a5c5d8-90fe-4eb6-bd23-f30a067f6602",
        "value": "au-login-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:34+00:00",
        "timestamp": "1774018834",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c88bfbe-59fc-4f36-9164-4c0161af0a5e",
        "value": "au-web-login-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:34+00:00",
        "timestamp": "1774018834",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae75d377-c848-41ab-9dfe-cbf6ceea0247",
        "value": "au.d-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:34+00:00",
        "timestamp": "1774018834",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b5f496c-6506-4450-a9d9-8bac7f013bb2",
        "value": "avw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:34+00:00",
        "timestamp": "1774018834",
        "to_ids": true,
        "type": "domain",
        "uuid": "c84470f6-6ec8-4f74-81f4-a9a822ddb9b7",
        "value": "axq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:34+00:00",
        "timestamp": "1774018834",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d499cf8-6c02-4fe2-9581-70b61126e0c9",
        "value": "axy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:34+00:00",
        "timestamp": "1774018835",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffd6b637-167a-40f9-8a3b-e9be7d5e7439",
        "value": "ay.v-a-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:35+00:00",
        "timestamp": "1774018835",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f06466c-2766-4a9c-9d35-9ee7a1c4e073",
        "value": "b-a-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:35+00:00",
        "timestamp": "1774018835",
        "to_ids": true,
        "type": "domain",
        "uuid": "a67ffb80-fadb-406f-84a7-55a09c6892a3",
        "value": "b-app-c-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:35+00:00",
        "timestamp": "1774018835",
        "to_ids": true,
        "type": "domain",
        "uuid": "87093a9f-b8a8-40fc-90ca-d6a878fe9a49",
        "value": "b-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:35+00:00",
        "timestamp": "1774018835",
        "to_ids": true,
        "type": "domain",
        "uuid": "c29dba32-5b98-4b65-9a75-89b295829c39",
        "value": "b-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:35+00:00",
        "timestamp": "1774018835",
        "to_ids": true,
        "type": "domain",
        "uuid": "01d9ce04-7a0e-4ae3-861e-6067a55f9a5b",
        "value": "b-wap-d-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:35+00:00",
        "timestamp": "1774018836",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a6bcb39-6891-47dc-b932-9a04db50eb18",
        "value": "b-web-c-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:36+00:00",
        "timestamp": "1774018836",
        "to_ids": true,
        "type": "domain",
        "uuid": "8600cb60-7386-4330-ac5e-cfbc9890479f",
        "value": "b9.m-u-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:36+00:00",
        "timestamp": "1774018836",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dbe2db9-8bc9-475f-bf2d-0c606d2e2822",
        "value": "base-hk-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:36+00:00",
        "timestamp": "1774018836",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d23ffbd-3a5c-4ab3-8616-d04edbe1b86e",
        "value": "bcde.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:36+00:00",
        "timestamp": "1774018836",
        "to_ids": true,
        "type": "domain",
        "uuid": "21c65555-66a3-4549-b1e5-afafb50ccf2e",
        "value": "bde-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:36+00:00",
        "timestamp": "1774018836",
        "to_ids": true,
        "type": "domain",
        "uuid": "d06e12c2-a446-46eb-b0e9-ffe52f2fd0b3",
        "value": "bdq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:36+00:00",
        "timestamp": "1774018836",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca83cf6c-8e75-4e1c-8643-d77c2649095a",
        "value": "bdqhl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:36+00:00",
        "timestamp": "1774018837",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d783ec5-68f7-4812-be16-f72dd8f31045",
        "value": "bec-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:37+00:00",
        "timestamp": "1774018837",
        "to_ids": true,
        "type": "domain",
        "uuid": "361836c2-a0fd-49f9-84e3-37d6f716fd7b",
        "value": "bec-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:37+00:00",
        "timestamp": "1774018837",
        "to_ids": true,
        "type": "domain",
        "uuid": "58d3c979-1c5b-42a3-a0ef-38093783d7bf",
        "value": "bed-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:37+00:00",
        "timestamp": "1774018837",
        "to_ids": true,
        "type": "domain",
        "uuid": "4509a681-8d05-4828-87d2-75f6466a76a4",
        "value": "bef-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:37+00:00",
        "timestamp": "1774018837",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd2690a0-1f89-44b0-a177-83dc0d6a65e2",
        "value": "bfc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:37+00:00",
        "timestamp": "1774018837",
        "to_ids": true,
        "type": "domain",
        "uuid": "6440f20f-b0ca-4deb-b976-9207adfd506d",
        "value": "bgh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:37+00:00",
        "timestamp": "1774018838",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc08c881-0d52-4526-82ed-624fba89e4c2",
        "value": "bgh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:38+00:00",
        "timestamp": "1774018838",
        "to_ids": true,
        "type": "domain",
        "uuid": "a750f338-411b-4818-b7bc-942c77310ea7",
        "value": "bhl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:38+00:00",
        "timestamp": "1774018838",
        "to_ids": true,
        "type": "domain",
        "uuid": "989dc869-9c3b-4aaf-b00b-6eb509f68530",
        "value": "bhy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:38+00:00",
        "timestamp": "1774018838",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cdcbec2-8aa2-402b-9f54-445df412d4a6",
        "value": "bkd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:38+00:00",
        "timestamp": "1774018838",
        "to_ids": true,
        "type": "domain",
        "uuid": "459ce044-61e6-40af-b166-0165319127d1",
        "value": "bkp-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:38+00:00",
        "timestamp": "1774018838",
        "to_ids": true,
        "type": "domain",
        "uuid": "88ac44ed-6020-477c-b55d-e99e2d801e2a",
        "value": "bmo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:38+00:00",
        "timestamp": "1774018839",
        "to_ids": true,
        "type": "domain",
        "uuid": "e137805b-e12e-4b04-abdc-8b327cc08d68",
        "value": "bnp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:39+00:00",
        "timestamp": "1774018839",
        "to_ids": true,
        "type": "domain",
        "uuid": "bacc7956-42c1-4e03-b269-20ce0cb6db6d",
        "value": "bqr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:39+00:00",
        "timestamp": "1774018839",
        "to_ids": true,
        "type": "domain",
        "uuid": "96262ee4-06ca-4c72-b1f5-f12d86a8fa60",
        "value": "bqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:39+00:00",
        "timestamp": "1774018839",
        "to_ids": true,
        "type": "domain",
        "uuid": "0504835b-07d3-42ca-9ff8-74de48e1a4d4",
        "value": "bridge-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:39+00:00",
        "timestamp": "1774018839",
        "to_ids": true,
        "type": "domain",
        "uuid": "74065f01-cdda-4757-be46-46a8caa820ba",
        "value": "brm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:39+00:00",
        "timestamp": "1774018839",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6cf8a71-4fb5-459e-8654-91a21c28d76c",
        "value": "bst-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:39+00:00",
        "timestamp": "1774018839",
        "to_ids": true,
        "type": "domain",
        "uuid": "342794f0-84a8-4e57-868f-9794864492ef",
        "value": "btr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:40+00:00",
        "timestamp": "1774018840",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebf384c3-32cf-4a4c-938a-888322fcb8c1",
        "value": "bvw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:40+00:00",
        "timestamp": "1774018840",
        "to_ids": true,
        "type": "domain",
        "uuid": "06c18060-2991-4a63-bc5d-e21a201bc8a0",
        "value": "bvx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:40+00:00",
        "timestamp": "1774018840",
        "to_ids": true,
        "type": "domain",
        "uuid": "db65e559-cdfb-485b-a2ca-8b1ecdb0bb30",
        "value": "bwf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:40+00:00",
        "timestamp": "1774018840",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5134864-65ee-48f5-98d0-6ffb8b193944",
        "value": "bxc-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:40+00:00",
        "timestamp": "1774018840",
        "to_ids": true,
        "type": "domain",
        "uuid": "a67c5337-998b-4dd2-a172-77ae4cc40078",
        "value": "bxc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:40+00:00",
        "timestamp": "1774018840",
        "to_ids": true,
        "type": "domain",
        "uuid": "4381c0c1-a159-43b0-bce0-2d489625bef5",
        "value": "bxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:40+00:00",
        "timestamp": "1774018841",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdc4c22e-3578-4216-b5ab-833c98db170b",
        "value": "c-app-d-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:41+00:00",
        "timestamp": "1774018841",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea69ac03-db1e-4668-9592-17eafcc7891f",
        "value": "c-d-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:41+00:00",
        "timestamp": "1774018841",
        "to_ids": true,
        "type": "domain",
        "uuid": "65d42506-191d-4ffd-86a8-f1fc3cee2732",
        "value": "c-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:41+00:00",
        "timestamp": "1774018841",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b26cf63-9944-4b9b-8641-d72585a0efa1",
        "value": "c-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:41+00:00",
        "timestamp": "1774018841",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d5793b2-8140-4e2b-820a-27437c3ace4f",
        "value": "c-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:41+00:00",
        "timestamp": "1774018841",
        "to_ids": true,
        "type": "domain",
        "uuid": "a566f2da-4201-4992-8d13-41da5bd8a8dd",
        "value": "c-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:41+00:00",
        "timestamp": "1774018841",
        "to_ids": true,
        "type": "domain",
        "uuid": "90379f55-27da-468e-9f10-bde6d05ed0a6",
        "value": "c-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:42+00:00",
        "timestamp": "1774018842",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cb84904-2f35-438b-9730-6eb316d2095e",
        "value": "c-wap-e-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:42+00:00",
        "timestamp": "1774018842",
        "to_ids": true,
        "type": "domain",
        "uuid": "36062e6a-85fd-4f30-881b-26c4d40cf07e",
        "value": "c5.ceg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:42+00:00",
        "timestamp": "1774018842",
        "to_ids": true,
        "type": "domain",
        "uuid": "490b9e64-3ac1-4195-ac00-394d84611ce4",
        "value": "cab-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:42+00:00",
        "timestamp": "1774018842",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b78e8d7-e07a-48da-bb11-16e90828cc3a",
        "value": "cc.hie-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:42+00:00",
        "timestamp": "1774018842",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8dc091d-9c9d-4d56-bde5-efe741da25a9",
        "value": "cdef.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:42+00:00",
        "timestamp": "1774018842",
        "to_ids": true,
        "type": "domain",
        "uuid": "603568a9-b972-45b8-b9f1-992d7a92e98d",
        "value": "cefhl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:42+00:00",
        "timestamp": "1774018843",
        "to_ids": true,
        "type": "domain",
        "uuid": "33d3647d-c3d6-4f3b-8344-6a336fd6d745",
        "value": "ceg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:43+00:00",
        "timestamp": "1774018843",
        "to_ids": true,
        "type": "domain",
        "uuid": "92e0d456-3062-48ff-b930-c03cdcbcfc3c",
        "value": "center-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:43+00:00",
        "timestamp": "1774018843",
        "to_ids": true,
        "type": "domain",
        "uuid": "7966dfec-9bce-4800-8ab6-12ea7ab1b5d9",
        "value": "center-apps-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:43+00:00",
        "timestamp": "1774018843",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7aa9584-ecd8-491b-b8a8-986c3a4b0dc3",
        "value": "cfd-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:43+00:00",
        "timestamp": "1774018843",
        "to_ids": true,
        "type": "domain",
        "uuid": "9978a681-061d-4312-936d-ede26ec2a3c6",
        "value": "cfe-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:43+00:00",
        "timestamp": "1774018843",
        "to_ids": true,
        "type": "domain",
        "uuid": "300809c3-cbd6-4a60-82a0-908ac8acff0c",
        "value": "cgr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:43+00:00",
        "timestamp": "1774018844",
        "to_ids": true,
        "type": "domain",
        "uuid": "20e841bb-e5fa-4c4d-bdde-f8771971a50d",
        "value": "chat-site-net-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:44+00:00",
        "timestamp": "1774018844",
        "to_ids": true,
        "type": "domain",
        "uuid": "ede3e7a8-bd81-4189-bc88-3555d25e89b1",
        "value": "chat-web-pro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:44+00:00",
        "timestamp": "1774018844",
        "to_ids": true,
        "type": "domain",
        "uuid": "1052c809-a7ab-46e2-a1a7-2161d91352ae",
        "value": "chatlink-net-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:44+00:00",
        "timestamp": "1774018844",
        "to_ids": true,
        "type": "domain",
        "uuid": "44f86815-e9f4-43bb-b81a-9efb809aba55",
        "value": "chatmsg-net-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:44+00:00",
        "timestamp": "1774018844",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bef5b3f-b45c-4189-a10d-2b4f2dd4624f",
        "value": "chatweb-cn-pro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:44+00:00",
        "timestamp": "1774018844",
        "to_ids": true,
        "type": "domain",
        "uuid": "27111c67-30bb-4c25-91e0-b4f46c0de727",
        "value": "chatweb-link-pro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:44+00:00",
        "timestamp": "1774018844",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7f87787-b7b4-4d9a-b2ed-e07fa6858f8d",
        "value": "chatweb-live-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:45+00:00",
        "timestamp": "1774018845",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3213500-219f-4b57-9d05-d7f8772239eb",
        "value": "ci.jkg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:45+00:00",
        "timestamp": "1774018845",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac3f1947-6606-4ad8-90cd-52c361a2f854",
        "value": "cjk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:45+00:00",
        "timestamp": "1774018845",
        "to_ids": true,
        "type": "domain",
        "uuid": "b53ee647-062f-40e7-9d81-38f994cd09e4",
        "value": "ckw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:45+00:00",
        "timestamp": "1774018845",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3e87b4b-0559-485a-94cd-58f15dad46e5",
        "value": "clm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:45+00:00",
        "timestamp": "1774018845",
        "to_ids": true,
        "type": "domain",
        "uuid": "5144dc6c-cb77-46a7-ba5f-2b6495880db7",
        "value": "cn-abcd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:45+00:00",
        "timestamp": "1774018845",
        "to_ids": true,
        "type": "domain",
        "uuid": "517e5ced-db2b-4677-b205-0b3cc838bc9f",
        "value": "cn-acrv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:45+00:00",
        "timestamp": "1774018846",
        "to_ids": true,
        "type": "domain",
        "uuid": "070e0bce-f483-406b-bb89-9311f2a79c43",
        "value": "cn-acxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:46+00:00",
        "timestamp": "1774018846",
        "to_ids": true,
        "type": "domain",
        "uuid": "23da80dc-2417-4ea1-a2a6-c1a90853fa7f",
        "value": "cn-ak-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:46+00:00",
        "timestamp": "1774018846",
        "to_ids": true,
        "type": "domain",
        "uuid": "25371e45-6769-436c-892d-75ca15f62a90",
        "value": "cn-aqmv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:46+00:00",
        "timestamp": "1774018846",
        "to_ids": true,
        "type": "domain",
        "uuid": "4468a74b-34a0-4454-8798-cf248a53324b",
        "value": "cn-aqwr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:46+00:00",
        "timestamp": "1774018846",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9d545c0-3221-4101-8bde-32474ef342dd",
        "value": "cn-avx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:46+00:00",
        "timestamp": "1774018846",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5b0cd4e-35b2-4115-8ea6-0810d24ec2b2",
        "value": "cn-bdfq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:46+00:00",
        "timestamp": "1774018847",
        "to_ids": true,
        "type": "domain",
        "uuid": "d11b1463-36e8-4cf0-8966-af8c29d1de59",
        "value": "cn-bdxr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:47+00:00",
        "timestamp": "1774018847",
        "to_ids": true,
        "type": "domain",
        "uuid": "11ea2de1-d989-4c9a-ad23-f687619ecc8d",
        "value": "cn-bf-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:47+00:00",
        "timestamp": "1774018847",
        "to_ids": true,
        "type": "domain",
        "uuid": "25c139b7-43e7-4f35-b16a-7326892ed67b",
        "value": "cn-bfck-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:47+00:00",
        "timestamp": "1774018847",
        "to_ids": true,
        "type": "domain",
        "uuid": "afc9c759-3d7b-43db-a6ce-8d1acad2ddc4",
        "value": "cn-bhqw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:47+00:00",
        "timestamp": "1774018847",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d50d3ec-45fa-4a6f-97da-648aef32e527",
        "value": "cn-bhy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:47+00:00",
        "timestamp": "1774018847",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5d6b4e8-041a-4b26-a19e-466167706c8c",
        "value": "cn-bkda-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:47+00:00",
        "timestamp": "1774018847",
        "to_ids": true,
        "type": "domain",
        "uuid": "88f39255-c6d8-4782-82b3-da8dcd3e82b0",
        "value": "cn-bklq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:47+00:00",
        "timestamp": "1774018848",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dfcf536-161f-4b79-af34-8572e7bef4ed",
        "value": "cn-bmt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:48+00:00",
        "timestamp": "1774018848",
        "to_ids": true,
        "type": "domain",
        "uuid": "64af9ccb-8b48-46d6-94a7-506ba5911d96",
        "value": "cn-bq-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:48+00:00",
        "timestamp": "1774018848",
        "to_ids": true,
        "type": "domain",
        "uuid": "89a4be2d-0944-4033-b1bd-8c8376e81f87",
        "value": "cn-bqmv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:48+00:00",
        "timestamp": "1774018848",
        "to_ids": true,
        "type": "domain",
        "uuid": "deead23f-4470-43c0-bcb8-cefe7070a25b",
        "value": "cn-bqmw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:48+00:00",
        "timestamp": "1774018848",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a5b4a8b-279e-45b1-92e8-808fbe642c5f",
        "value": "cn-bqvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:48+00:00",
        "timestamp": "1774018848",
        "to_ids": true,
        "type": "domain",
        "uuid": "e99d8040-d57a-4de5-a0fc-9ceece7cf806",
        "value": "cn-bqxr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:48+00:00",
        "timestamp": "1774018849",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd627806-5a1b-4ca9-b7bc-5e4b5c7b4d42",
        "value": "cn-bridge-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:49+00:00",
        "timestamp": "1774018849",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae09e96f-e0ac-4a92-a7e2-0e90846a1af3",
        "value": "cn-bridge-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:49+00:00",
        "timestamp": "1774018849",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e4150e7-9a31-4a3f-af86-f7d80a707a4a",
        "value": "cn-brzt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:49+00:00",
        "timestamp": "1774018849",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c6f6bcb-21c8-4003-ac26-05eff5d6afc4",
        "value": "cn-bv-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:49+00:00",
        "timestamp": "1774018849",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6b540af-a9d9-4a86-af4b-de3fbd041f2b",
        "value": "cn-bvnl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:49+00:00",
        "timestamp": "1774018849",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0545bcd-71bd-41f8-83b8-fa8f0bb3a145",
        "value": "cn-bxrd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:49+00:00",
        "timestamp": "1774018849",
        "to_ids": true,
        "type": "domain",
        "uuid": "282795d4-3bb7-4cdb-bb3d-2f8877b696d4",
        "value": "cn-bzka-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:49+00:00",
        "timestamp": "1774018850",
        "to_ids": true,
        "type": "domain",
        "uuid": "e43cac54-1cab-487b-a09b-3b51d0163865",
        "value": "cn-cak-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:50+00:00",
        "timestamp": "1774018850",
        "to_ids": true,
        "type": "domain",
        "uuid": "7960499b-edd4-40cb-a6cb-2e65bdbb5af3",
        "value": "cn-cdef-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:50+00:00",
        "timestamp": "1774018850",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea79a47f-4129-4428-ba56-79bfe454f9dd",
        "value": "cn-cewm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:50+00:00",
        "timestamp": "1774018850",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3a09365-9f71-4340-a9d3-54ba9deec5f6",
        "value": "cn-clpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:50+00:00",
        "timestamp": "1774018850",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd23476d-9162-4398-8233-52846923a638",
        "value": "cn-cmfw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:50+00:00",
        "timestamp": "1774018850",
        "to_ids": true,
        "type": "domain",
        "uuid": "741f4ba0-57f5-4d3d-bd19-fc087ff5ae86",
        "value": "cn-cmnv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:50+00:00",
        "timestamp": "1774018851",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8cc407b-6f97-4c60-b3e9-069a0d3bd5da",
        "value": "cn-cmtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:51+00:00",
        "timestamp": "1774018851",
        "to_ids": true,
        "type": "domain",
        "uuid": "a133dbc5-37a1-46ec-a167-2dd83ce1149e",
        "value": "cn-cndp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:51+00:00",
        "timestamp": "1774018851",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a2248ce-5fe0-4b7c-a142-3073cc4d1506",
        "value": "cn-cqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:51+00:00",
        "timestamp": "1774018851",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0b083c4-c243-4f95-bc48-45145eb43095",
        "value": "cn-crxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:51+00:00",
        "timestamp": "1774018851",
        "to_ids": true,
        "type": "domain",
        "uuid": "a73d0743-476c-464c-b5cf-34c465f1625d",
        "value": "cn-cs-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:51+00:00",
        "timestamp": "1774018851",
        "to_ids": true,
        "type": "domain",
        "uuid": "b78a52ee-48c9-423e-86ff-40b0e3058f1b",
        "value": "cn-cslm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:51+00:00",
        "timestamp": "1774018851",
        "to_ids": true,
        "type": "domain",
        "uuid": "a94e1477-1791-4e20-a900-f2de6dd6dbae",
        "value": "cn-cvnz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:51+00:00",
        "timestamp": "1774018852",
        "to_ids": true,
        "type": "domain",
        "uuid": "50ab367c-8dfa-4d7e-b69c-c4ea7ef6d3a6",
        "value": "cn-cwrp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:52+00:00",
        "timestamp": "1774018852",
        "to_ids": true,
        "type": "domain",
        "uuid": "91722645-68b3-464a-aa47-3b9f1dea80be",
        "value": "cn-cxtl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:52+00:00",
        "timestamp": "1774018852",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f27a746-49d7-441c-9247-4696a56f68ba",
        "value": "cn-cyql-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:52+00:00",
        "timestamp": "1774018852",
        "to_ids": true,
        "type": "domain",
        "uuid": "59036c8e-65d0-4b71-a273-80c24dd7ce4b",
        "value": "cn-da-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:52+00:00",
        "timestamp": "1774018852",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a43c528-54d7-463b-915e-ca6d677c70cc",
        "value": "cn-daxq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:52+00:00",
        "timestamp": "1774018852",
        "to_ids": true,
        "type": "domain",
        "uuid": "53a0d49e-10ad-42fc-ab8b-306213061e19",
        "value": "cn-dfnx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:52+00:00",
        "timestamp": "1774018853",
        "to_ids": true,
        "type": "domain",
        "uuid": "378789dc-6305-4dc3-af2a-851d4f604097",
        "value": "cn-dfzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:53+00:00",
        "timestamp": "1774018853",
        "to_ids": true,
        "type": "domain",
        "uuid": "b149bfe5-2054-4e67-982f-c07c824fff86",
        "value": "cn-dgqr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:53+00:00",
        "timestamp": "1774018853",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbf555cd-21d8-420e-9a7d-0054f3f7b264",
        "value": "cn-dhkn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:53+00:00",
        "timestamp": "1774018853",
        "to_ids": true,
        "type": "domain",
        "uuid": "90183568-139f-4b6c-89c0-1d319157b89f",
        "value": "cn-dhy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:53+00:00",
        "timestamp": "1774018853",
        "to_ids": true,
        "type": "domain",
        "uuid": "49035751-cb51-48f8-9201-c5f93e41827a",
        "value": "cn-dplq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:53+00:00",
        "timestamp": "1774018853",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca150654-c04f-4cf4-8efd-182f5d5343ba",
        "value": "cn-dpmk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:53+00:00",
        "timestamp": "1774018854",
        "to_ids": true,
        "type": "domain",
        "uuid": "5813dfbd-6629-4eb4-9611-b52978e5356f",
        "value": "cn-dvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:54+00:00",
        "timestamp": "1774018854",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba51ba70-204d-47c8-99e2-61cb646d5197",
        "value": "cn-dvrk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:54+00:00",
        "timestamp": "1774018854",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf5662d4-a963-497e-9d5b-abd4296b5b3e",
        "value": "cn-dx-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:54+00:00",
        "timestamp": "1774018854",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2672253-c766-4464-8904-436f57012a34",
        "value": "cn-dxca-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:54+00:00",
        "timestamp": "1774018854",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecbbc670-7f1b-44eb-8a6d-fb29efac7656",
        "value": "cn-dxpa-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:54+00:00",
        "timestamp": "1774018854",
        "to_ids": true,
        "type": "domain",
        "uuid": "809b4951-cf0e-4781-b3bd-693f6843f2d5",
        "value": "cn-dxrf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:54+00:00",
        "timestamp": "1774018854",
        "to_ids": true,
        "type": "domain",
        "uuid": "749c7104-0064-4a4b-be75-8b8596630736",
        "value": "cn-dxtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:55+00:00",
        "timestamp": "1774018855",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e65bb29-2922-4420-9320-f27c44363e3d",
        "value": "cn-efjk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:55+00:00",
        "timestamp": "1774018855",
        "to_ids": true,
        "type": "domain",
        "uuid": "de5edeea-a8b7-43f6-beee-0d716475aea8",
        "value": "cn-efrq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:55+00:00",
        "timestamp": "1774018855",
        "to_ids": true,
        "type": "domain",
        "uuid": "66214f95-15fb-4bda-9154-d4812fff54e0",
        "value": "cn-efvl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:55+00:00",
        "timestamp": "1774018855",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e04e910-a529-4125-9b98-7be27f0ea662",
        "value": "cn-egpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:55+00:00",
        "timestamp": "1774018855",
        "to_ids": true,
        "type": "domain",
        "uuid": "f02ac798-265c-4d13-ba2a-1767093457a5",
        "value": "cn-egvz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:55+00:00",
        "timestamp": "1774018855",
        "to_ids": true,
        "type": "domain",
        "uuid": "f23badc6-0d57-4db4-a8e9-a57eb1f413ae",
        "value": "cn-ehzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:55+00:00",
        "timestamp": "1774018856",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ba4905e-5c3e-4b2f-9015-c0c5bf65674e",
        "value": "cn-ejkp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:56+00:00",
        "timestamp": "1774018856",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fb8c9d0-fdff-40b0-85c7-63aad248c32c",
        "value": "cn-ek-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:56+00:00",
        "timestamp": "1774018856",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbb78fcb-1d73-454f-bc66-daa4d6c97257",
        "value": "cn-epj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:56+00:00",
        "timestamp": "1774018856",
        "to_ids": true,
        "type": "domain",
        "uuid": "5073c982-0a3a-4148-ac1e-8db2d850124e",
        "value": "cn-fglk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:56+00:00",
        "timestamp": "1774018856",
        "to_ids": true,
        "type": "domain",
        "uuid": "311bd0e1-a310-46d7-9eb3-0342790c7312",
        "value": "cn-fgmz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:56+00:00",
        "timestamp": "1774018856",
        "to_ids": true,
        "type": "domain",
        "uuid": "31cd1ce9-ae86-4cf1-b266-c75106314df3",
        "value": "cn-fgrq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:56+00:00",
        "timestamp": "1774018856",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dc12873-3846-4992-b05e-3b0180e3eba7",
        "value": "cn-fhkr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:56+00:00",
        "timestamp": "1774018857",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa828f32-5f0c-4b93-9ce1-312dbc4e1e15",
        "value": "cn-fhzr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:57+00:00",
        "timestamp": "1774018857",
        "to_ids": true,
        "type": "domain",
        "uuid": "81941704-408d-4568-96ef-5915fa92db37",
        "value": "cn-fj-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:57+00:00",
        "timestamp": "1774018857",
        "to_ids": true,
        "type": "domain",
        "uuid": "657f8c13-2f71-44d5-af1e-38414404cb04",
        "value": "cn-fjid-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:57+00:00",
        "timestamp": "1774018857",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5dc80cf-2b57-44dd-a347-4437ef79ac62",
        "value": "cn-fkxl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:57+00:00",
        "timestamp": "1774018857",
        "to_ids": true,
        "type": "domain",
        "uuid": "585a4bec-8e62-43a5-ad05-6f28e738b151",
        "value": "cn-fn-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:57+00:00",
        "timestamp": "1774018857",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1dedf5b-fb37-4a81-8a85-630bf107603a",
        "value": "cn-fnqd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:57+00:00",
        "timestamp": "1774018858",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bb274c4-5f91-473e-b00b-593949f88138",
        "value": "cn-fnrl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:58+00:00",
        "timestamp": "1774018858",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f250f86-c7f8-41d7-ae11-d669991eb4d3",
        "value": "cn-fptk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:58+00:00",
        "timestamp": "1774018858",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebea7720-7816-4089-9b4c-2122f89a608f",
        "value": "cn-frxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:58+00:00",
        "timestamp": "1774018858",
        "to_ids": true,
        "type": "domain",
        "uuid": "66e2b45e-8509-4f92-a75a-3be031711ec8",
        "value": "cn-fut-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:58+00:00",
        "timestamp": "1774018858",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f9a65b2-bbb8-4d6c-98f9-60a93e48b573",
        "value": "cn-fvkq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:58+00:00",
        "timestamp": "1774018858",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8062ecc-497a-4287-8c57-4170cb99fe89",
        "value": "cn-fw-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:58+00:00",
        "timestamp": "1774018859",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d875362-9819-4d93-bdfe-d5f80c183c47",
        "value": "cn-fzk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:59+00:00",
        "timestamp": "1774018859",
        "to_ids": true,
        "type": "domain",
        "uuid": "05f8b3df-41c2-490b-94e6-eb6157ad156f",
        "value": "cn-gd-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:59+00:00",
        "timestamp": "1774018859",
        "to_ids": true,
        "type": "domain",
        "uuid": "1db6394a-6b8d-4c6a-b688-5ab69d713338",
        "value": "cn-gdpa-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:59+00:00",
        "timestamp": "1774018859",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b32b6d3-b0ba-49f1-8374-02989ca4086d",
        "value": "cn-gjry-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:59+00:00",
        "timestamp": "1774018859",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab2ecf85-498c-4ce8-9217-36b7379ca8e3",
        "value": "cn-gjvl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:59+00:00",
        "timestamp": "1774018859",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce6c97f3-35a7-4107-8c36-e9b16f161320",
        "value": "cn-gk-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:59+00:00",
        "timestamp": "1774018859",
        "to_ids": true,
        "type": "domain",
        "uuid": "e027c3b4-9969-4256-9d34-2cfedd7c8ae9",
        "value": "cn-gkht-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:00:59+00:00",
        "timestamp": "1774018860",
        "to_ids": true,
        "type": "domain",
        "uuid": "5592e58b-0a38-41fe-b5c8-01955dad74d3",
        "value": "cn-gkqb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:00+00:00",
        "timestamp": "1774018860",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f610054-376c-498a-8412-7eb0e427948f",
        "value": "cn-gkvm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:00+00:00",
        "timestamp": "1774018860",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ef6cb36-ad59-40eb-9bbb-d2cb30ac11fd",
        "value": "cn-global-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:00+00:00",
        "timestamp": "1774018860",
        "to_ids": true,
        "type": "domain",
        "uuid": "796d0e35-049b-46a4-bd03-ad6fbce61345",
        "value": "cn-glqz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:00+00:00",
        "timestamp": "1774018860",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a1d8165-300b-4086-af3e-5ea9088eaef2",
        "value": "cn-gnt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:00+00:00",
        "timestamp": "1774018860",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc1d3cf7-65dd-4f24-a292-3995ea844a22",
        "value": "cn-gpln-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:00+00:00",
        "timestamp": "1774018861",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a028083-3db2-4c22-a024-1e9850b5aad1",
        "value": "cn-gqms-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:01+00:00",
        "timestamp": "1774018861",
        "to_ids": true,
        "type": "domain",
        "uuid": "df2dc87d-bdcd-4004-9040-3cd2fb8fc86e",
        "value": "cn-gqrb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:01+00:00",
        "timestamp": "1774018861",
        "to_ids": true,
        "type": "domain",
        "uuid": "5eb0dcb4-d55f-4aad-9d75-a50810e3f526",
        "value": "cn-gs-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:01+00:00",
        "timestamp": "1774018861",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bd832bb-7d29-4c05-9d91-07d101551ded",
        "value": "cn-gs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:01+00:00",
        "timestamp": "1774018861",
        "to_ids": true,
        "type": "domain",
        "uuid": "218288cd-fb13-4a47-9030-59a511f1f5d0",
        "value": "cn-gswf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:01+00:00",
        "timestamp": "1774018861",
        "to_ids": true,
        "type": "domain",
        "uuid": "618909f4-1f65-44f9-b5e9-d6be02ced7d2",
        "value": "cn-gtdm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:01+00:00",
        "timestamp": "1774018861",
        "to_ids": true,
        "type": "domain",
        "uuid": "1381551c-3977-4584-976b-d7a5c83ad05e",
        "value": "cn-gwmb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:01+00:00",
        "timestamp": "1774018862",
        "to_ids": true,
        "type": "domain",
        "uuid": "98d3266e-c152-44d4-9977-1e2c7860811e",
        "value": "cn-gwrq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:02+00:00",
        "timestamp": "1774018862",
        "to_ids": true,
        "type": "domain",
        "uuid": "77bc8be2-80e4-441a-9589-31ed30bc58fc",
        "value": "cn-gzpq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:02+00:00",
        "timestamp": "1774018862",
        "to_ids": true,
        "type": "domain",
        "uuid": "eff83714-1559-4ecf-a827-b1e4f59f7fce",
        "value": "cn-ha-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:02+00:00",
        "timestamp": "1774018862",
        "to_ids": true,
        "type": "domain",
        "uuid": "1db05a06-22f2-426b-8588-4e9d897b8c95",
        "value": "cn-hbkq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:02+00:00",
        "timestamp": "1774018862",
        "to_ids": true,
        "type": "domain",
        "uuid": "6744da8f-9e0a-4804-8ecd-b7326ba8a899",
        "value": "cn-hbrx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:02+00:00",
        "timestamp": "1774018862",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac19592a-a6a9-464f-9f39-f76b9daf0e47",
        "value": "cn-hlmr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:02+00:00",
        "timestamp": "1774018862",
        "to_ids": true,
        "type": "domain",
        "uuid": "61d6673f-b9cc-473f-8209-b897f013c734",
        "value": "cn-hmbq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:02+00:00",
        "timestamp": "1774018863",
        "to_ids": true,
        "type": "domain",
        "uuid": "724ed17a-1cd3-453f-903b-b13e8fece012",
        "value": "cn-hmvb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:03+00:00",
        "timestamp": "1774018863",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf1ac926-90a3-49d5-8911-cd1d6c398873",
        "value": "cn-hp-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:03+00:00",
        "timestamp": "1774018863",
        "to_ids": true,
        "type": "domain",
        "uuid": "1130e2e0-b426-4b4f-b683-b0859379d345",
        "value": "cn-hpow-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:03+00:00",
        "timestamp": "1774018863",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d93b4fe-0b15-488b-b14e-68b4dd1bac7c",
        "value": "cn-hqb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:03+00:00",
        "timestamp": "1774018863",
        "to_ids": true,
        "type": "domain",
        "uuid": "c100e742-ed2b-4f9a-91dd-d1e5db8f535d",
        "value": "cn-hqlp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:03+00:00",
        "timestamp": "1774018863",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7bc5e4e-6100-4094-a6fc-470a11cdf19f",
        "value": "cn-hr-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:03+00:00",
        "timestamp": "1774018864",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6364a75-7b15-4e67-8e80-02ab35dde730",
        "value": "cn-hrpv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:04+00:00",
        "timestamp": "1774018864",
        "to_ids": true,
        "type": "domain",
        "uuid": "e15def21-81cb-4739-8d29-a4757328547d",
        "value": "cn-hrqd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:04+00:00",
        "timestamp": "1774018864",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2804412-49f1-4d77-89af-d457771c7f4f",
        "value": "cn-hrtq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:04+00:00",
        "timestamp": "1774018864",
        "to_ids": true,
        "type": "domain",
        "uuid": "1035bec0-39d0-463f-ab78-93f06c974ec4",
        "value": "cn-hslv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:04+00:00",
        "timestamp": "1774018864",
        "to_ids": true,
        "type": "domain",
        "uuid": "83ac0059-4ad7-4a0d-9b46-70830509f835",
        "value": "cn-hxtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:04+00:00",
        "timestamp": "1774018864",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d1ecae7-95e3-4d91-8ae0-9f1c01758abd",
        "value": "cn-hznf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:04+00:00",
        "timestamp": "1774018865",
        "to_ids": true,
        "type": "domain",
        "uuid": "391b9812-df31-4989-8ea2-cf4398023ba0",
        "value": "cn-igtn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:05+00:00",
        "timestamp": "1774018865",
        "to_ids": true,
        "type": "domain",
        "uuid": "16683b07-4117-4b99-a94f-9b0d68c197b9",
        "value": "cn-ikm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:05+00:00",
        "timestamp": "1774018865",
        "to_ids": true,
        "type": "domain",
        "uuid": "b50d8250-0f21-4e15-b9e8-a3aa48279147",
        "value": "cn-inrd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:05+00:00",
        "timestamp": "1774018865",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcf6c55e-d84e-4c73-b353-347fee01074f",
        "value": "cn-iqzd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:05+00:00",
        "timestamp": "1774018865",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3359951-089f-42cd-81b0-e0a21c94ac91",
        "value": "cn-ivpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:05+00:00",
        "timestamp": "1774018865",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f45563d-2cb4-4110-91d5-e720efa19065",
        "value": "cn-ivpx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:05+00:00",
        "timestamp": "1774018866",
        "to_ids": true,
        "type": "domain",
        "uuid": "1028fd65-b0ae-49fc-8dee-1346524bf5c1",
        "value": "cn-ivql-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:06+00:00",
        "timestamp": "1774018866",
        "to_ids": true,
        "type": "domain",
        "uuid": "13eae197-2f43-4d18-ae33-3d0e0cb4f204",
        "value": "cn-ivtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:06+00:00",
        "timestamp": "1774018866",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a3163a1-9f35-478d-81fa-66b2d5fbffe2",
        "value": "cn-iwdp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:06+00:00",
        "timestamp": "1774018866",
        "to_ids": true,
        "type": "domain",
        "uuid": "65f75392-d783-4e1f-ac9b-55e3c63b8b43",
        "value": "cn-iwpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:06+00:00",
        "timestamp": "1774018866",
        "to_ids": true,
        "type": "domain",
        "uuid": "72f40d72-8a0c-4ecb-ac76-370a42f8f9b4",
        "value": "cn-jl-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:06+00:00",
        "timestamp": "1774018866",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a8e7a33-9241-4c24-90c5-367c90a4ebf5",
        "value": "cn-jlst-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:06+00:00",
        "timestamp": "1774018866",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd71d2d9-d379-4c4b-9a11-0924afd5e7e4",
        "value": "cn-jowq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:06+00:00",
        "timestamp": "1774018867",
        "to_ids": true,
        "type": "domain",
        "uuid": "01609bd8-b9f7-446e-a00e-fd2e0324907d",
        "value": "cn-jpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:07+00:00",
        "timestamp": "1774018867",
        "to_ids": true,
        "type": "domain",
        "uuid": "10c892f0-a734-4721-9de5-9141620c5885",
        "value": "cn-jq-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:07+00:00",
        "timestamp": "1774018867",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a4e2675-737b-41d6-8ef6-c797c88fc07c",
        "value": "cn-jqtw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:07+00:00",
        "timestamp": "1774018867",
        "to_ids": true,
        "type": "domain",
        "uuid": "7dfc8804-67ec-4c67-9fc1-fdeac45f2b7a",
        "value": "cn-jswn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:07+00:00",
        "timestamp": "1774018867",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbf8b032-c0c5-44c8-8ae0-5380fc4fb46b",
        "value": "cn-jvkr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:07+00:00",
        "timestamp": "1774018867",
        "to_ids": true,
        "type": "domain",
        "uuid": "5854af1c-52fb-4b7b-bd06-690893ea1d39",
        "value": "cn-jvtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:07+00:00",
        "timestamp": "1774018867",
        "to_ids": true,
        "type": "domain",
        "uuid": "55562a62-5bfb-4a40-a259-54a3447a9f51",
        "value": "cn-jwrn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:08+00:00",
        "timestamp": "1774018868",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb4504bf-b942-4e9f-b455-583d4b3e11f1",
        "value": "cn-jzpd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:08+00:00",
        "timestamp": "1774018868",
        "to_ids": true,
        "type": "domain",
        "uuid": "6784af7a-4b75-44ee-8a72-fb2e530105c8",
        "value": "cn-kdx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:08+00:00",
        "timestamp": "1774018868",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a233a58-75b2-43ad-b5c7-2566209fd3e0",
        "value": "cn-kfrx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:08+00:00",
        "timestamp": "1774018868",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff67b3c6-826e-4d02-8d56-b2ad2c6f194c",
        "value": "cn-ki-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:08+00:00",
        "timestamp": "1774018868",
        "to_ids": true,
        "type": "domain",
        "uuid": "36205fca-2c16-4943-976b-f90ad8eb91af",
        "value": "cn-kiat-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:08+00:00",
        "timestamp": "1774018868",
        "to_ids": true,
        "type": "domain",
        "uuid": "a638250f-4f5a-479c-86a2-0d67d28192a0",
        "value": "cn-klqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:08+00:00",
        "timestamp": "1774018869",
        "to_ids": true,
        "type": "domain",
        "uuid": "307ca620-45ff-484c-8be0-5b5e2011d14b",
        "value": "cn-kmpa-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:09+00:00",
        "timestamp": "1774018869",
        "to_ids": true,
        "type": "domain",
        "uuid": "79a1f140-2fe1-4948-bd1f-847e0b34bef9",
        "value": "cn-kp-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:09+00:00",
        "timestamp": "1774018869",
        "to_ids": true,
        "type": "domain",
        "uuid": "332b2f81-5230-41de-8fc0-ce47f26a0358",
        "value": "cn-kpel-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:09+00:00",
        "timestamp": "1774018869",
        "to_ids": true,
        "type": "domain",
        "uuid": "80c73ba3-e5bd-45dc-915b-7d601b7656e9",
        "value": "cn-kplv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:09+00:00",
        "timestamp": "1774018869",
        "to_ids": true,
        "type": "domain",
        "uuid": "17445384-fed3-4454-8e4a-cb0f5ee591cf",
        "value": "cn-kpsv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:09+00:00",
        "timestamp": "1774018869",
        "to_ids": true,
        "type": "domain",
        "uuid": "22f31ab9-45b2-49c3-b6cb-4b58833ad1ac",
        "value": "cn-kqdf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:09+00:00",
        "timestamp": "1774018870",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b218312-3114-482c-a446-7d55e7b21afe",
        "value": "cn-kqtm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:10+00:00",
        "timestamp": "1774018870",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd58a535-b7f0-4352-8679-5300e2e5028b",
        "value": "cn-ktex-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:10+00:00",
        "timestamp": "1774018870",
        "to_ids": true,
        "type": "domain",
        "uuid": "685413bc-c583-4e92-adfb-ed37dcdc1272",
        "value": "cn-kxlm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:10+00:00",
        "timestamp": "1774018870",
        "to_ids": true,
        "type": "domain",
        "uuid": "dac37b14-a20d-4243-853f-21af6b34b68f",
        "value": "cn-kzbx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:10+00:00",
        "timestamp": "1774018870",
        "to_ids": true,
        "type": "domain",
        "uuid": "daf6e9b4-96fc-47c3-8b72-224d68a50926",
        "value": "cn-kzsl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:10+00:00",
        "timestamp": "1774018870",
        "to_ids": true,
        "type": "domain",
        "uuid": "db820a03-60b5-409a-8d5a-d35cc0ad7273",
        "value": "cn-lbrx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:10+00:00",
        "timestamp": "1774018870",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6371825-5750-4969-a5d0-2e7a4f9a0d9c",
        "value": "cn-lg-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:10+00:00",
        "timestamp": "1774018871",
        "to_ids": true,
        "type": "domain",
        "uuid": "38423bd7-8f66-43f8-b7dc-8619ae795179",
        "value": "cn-line-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:11+00:00",
        "timestamp": "1774018871",
        "to_ids": true,
        "type": "domain",
        "uuid": "69f705fc-f2d3-4f39-9bba-c212a45fac52",
        "value": "cn-lj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:11+00:00",
        "timestamp": "1774018871",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ba3c0c4-589c-4c26-8793-031792d90131",
        "value": "cn-lmfq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:11+00:00",
        "timestamp": "1774018871",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d6fd669-726a-4d57-998f-dbd560819d9d",
        "value": "cn-lmnp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:11+00:00",
        "timestamp": "1774018871",
        "to_ids": true,
        "type": "domain",
        "uuid": "890f033c-660b-4bff-abda-7106ff65c3bd",
        "value": "cn-lmqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:11+00:00",
        "timestamp": "1774018871",
        "to_ids": true,
        "type": "domain",
        "uuid": "235c67c4-5f77-4853-a182-583a729e9339",
        "value": "cn-lmvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:11+00:00",
        "timestamp": "1774018871",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f3370e4-8a26-4064-89e7-5f63f12e9374",
        "value": "cn-ln-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:12+00:00",
        "timestamp": "1774018872",
        "to_ids": true,
        "type": "domain",
        "uuid": "af568706-0de5-4ee2-8f9e-f95dbbab9ad6",
        "value": "cn-lqbf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:12+00:00",
        "timestamp": "1774018872",
        "to_ids": true,
        "type": "domain",
        "uuid": "68a9e4a2-4770-44cf-83ba-55297585cdcf",
        "value": "cn-lqbg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:12+00:00",
        "timestamp": "1774018872",
        "to_ids": true,
        "type": "domain",
        "uuid": "12341c38-abda-4b33-b863-9140306f9b30",
        "value": "cn-lqo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:12+00:00",
        "timestamp": "1774018872",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed2d039b-b86f-4363-8f01-e116780d0b74",
        "value": "cn-lqrm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:12+00:00",
        "timestamp": "1774018872",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4aba074-3390-45f2-9db9-a2321af326fa",
        "value": "cn-lw-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:12+00:00",
        "timestamp": "1774018872",
        "to_ids": true,
        "type": "domain",
        "uuid": "366b6cd1-6e6b-46cc-adf3-3a582543f0b3",
        "value": "cn-lwrx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:12+00:00",
        "timestamp": "1774018873",
        "to_ids": true,
        "type": "domain",
        "uuid": "21fdfa7d-62d4-43fc-9e7c-005f65f4ac82",
        "value": "cn-lxtz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:13+00:00",
        "timestamp": "1774018873",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a121419-483b-4335-9d55-9df5d35501ea",
        "value": "cn-lz-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:13+00:00",
        "timestamp": "1774018873",
        "to_ids": true,
        "type": "domain",
        "uuid": "328a0be8-76aa-40fc-b527-7dc4499c501d",
        "value": "cn-lzac-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:13+00:00",
        "timestamp": "1774018873",
        "to_ids": true,
        "type": "domain",
        "uuid": "683fdd1d-1d45-4103-a08c-eef0fc96eb1f",
        "value": "cn-mcs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:13+00:00",
        "timestamp": "1774018873",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf9b2c8c-d86e-4f88-989d-34ca4ca0108f",
        "value": "cn-mf-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:13+00:00",
        "timestamp": "1774018873",
        "to_ids": true,
        "type": "domain",
        "uuid": "37ce1600-df3b-4c21-b0bc-b55c1d9cc5fd",
        "value": "cn-mfdb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:13+00:00",
        "timestamp": "1774018873",
        "to_ids": true,
        "type": "domain",
        "uuid": "1073d016-6953-4ee7-976d-449ac4f63b16",
        "value": "cn-mh-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:13+00:00",
        "timestamp": "1774018874",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b0a9a14-8d30-4c78-b4bb-cd111c651144",
        "value": "cn-mhsx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:14+00:00",
        "timestamp": "1774018874",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c01ab43-d2d7-485f-b097-a025035513e5",
        "value": "cn-mndk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:14+00:00",
        "timestamp": "1774018874",
        "to_ids": true,
        "type": "domain",
        "uuid": "9422af8d-5e74-4113-b530-c21ec3c53cbe",
        "value": "cn-mnpx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:14+00:00",
        "timestamp": "1774018874",
        "to_ids": true,
        "type": "domain",
        "uuid": "0192a9a4-78b7-41a7-b6ed-9ed3b7cfc11b",
        "value": "cn-mnvb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:14+00:00",
        "timestamp": "1774018874",
        "to_ids": true,
        "type": "domain",
        "uuid": "c29e5994-3051-48bb-bca7-5299839e4d3e",
        "value": "cn-mnxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:14+00:00",
        "timestamp": "1774018874",
        "to_ids": true,
        "type": "domain",
        "uuid": "f07c4c8f-ca42-417a-9825-42a283777b3c",
        "value": "cn-mqgd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:14+00:00",
        "timestamp": "1774018874",
        "to_ids": true,
        "type": "domain",
        "uuid": "1668c0d8-abe1-4079-bd27-f4713126456f",
        "value": "cn-mqlp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:14+00:00",
        "timestamp": "1774018875",
        "to_ids": true,
        "type": "domain",
        "uuid": "56bd9fbd-df18-4568-a361-a5008c0367f2",
        "value": "cn-mqvx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:15+00:00",
        "timestamp": "1774018875",
        "to_ids": true,
        "type": "domain",
        "uuid": "b590cf13-f097-46f5-92cf-c064c4ae8474",
        "value": "cn-mrdx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:15+00:00",
        "timestamp": "1774018875",
        "to_ids": true,
        "type": "domain",
        "uuid": "61a7a824-0e07-4721-be7a-80da2c54474e",
        "value": "cn-mtnv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:15+00:00",
        "timestamp": "1774018875",
        "to_ids": true,
        "type": "domain",
        "uuid": "e47d199c-6e34-496f-ae53-56f145fc129e",
        "value": "cn-mtrq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:15+00:00",
        "timestamp": "1774018875",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c99c90d-1a91-4dc9-8d42-94767e82b510",
        "value": "cn-mvrf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:15+00:00",
        "timestamp": "1774018875",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f12647d-4ff2-4b06-a9d9-24351b578c0b",
        "value": "cn-mvsq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:15+00:00",
        "timestamp": "1774018875",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bb7ee6e-fd48-422d-b624-b5a04b2dc6c7",
        "value": "cn-mwy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:15+00:00",
        "timestamp": "1774018876",
        "to_ids": true,
        "type": "domain",
        "uuid": "94a5036f-041b-49ea-9ce6-aac5f309a1af",
        "value": "cn-mxtq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:16+00:00",
        "timestamp": "1774018876",
        "to_ids": true,
        "type": "domain",
        "uuid": "e82c0f1e-4fbf-4a4c-8a49-bed83bb881b0",
        "value": "cn-mxzr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:16+00:00",
        "timestamp": "1774018876",
        "to_ids": true,
        "type": "domain",
        "uuid": "b73b8f2c-6710-451e-884b-d10c2afac799",
        "value": "cn-mz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:16+00:00",
        "timestamp": "1774018876",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa64c8e2-c950-4d50-847b-8841019a5d19",
        "value": "cn-nb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:16+00:00",
        "timestamp": "1774018876",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e37c145-aba5-4966-898d-3e94441d8a70",
        "value": "cn-nbvc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:16+00:00",
        "timestamp": "1774018876",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fc6f9ca-a0c7-4b62-8ce2-30c50921708b",
        "value": "cn-nfp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:16+00:00",
        "timestamp": "1774018876",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbc2e03f-2667-4b8f-97e4-0fa9f9796b7c",
        "value": "cn-nh-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:17+00:00",
        "timestamp": "1774018877",
        "to_ids": true,
        "type": "domain",
        "uuid": "d00bb9ea-6390-4dab-87cf-e96d464e4e9d",
        "value": "cn-nm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:17+00:00",
        "timestamp": "1774018877",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b0138e1-074b-4358-b8a9-c21f29e7bd2a",
        "value": "cn-node-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:17+00:00",
        "timestamp": "1774018877",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7e6b42d-1830-48a1-93b9-4d7d10ff4c52",
        "value": "cn-npaq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:17+00:00",
        "timestamp": "1774018877",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9d6e710-4636-4ac1-8ab2-2802061fac7e",
        "value": "cn-npsl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:17+00:00",
        "timestamp": "1774018877",
        "to_ids": true,
        "type": "domain",
        "uuid": "18b862f6-e14b-4537-9511-7edb92f04c16",
        "value": "cn-nqbp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:17+00:00",
        "timestamp": "1774018877",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cd6cc90-ea41-4530-a944-4c2c4fef2ca5",
        "value": "cn-nqkr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:17+00:00",
        "timestamp": "1774018878",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d4def7a-a3e6-4971-b363-a92fccdb53cf",
        "value": "cn-nqpb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:18+00:00",
        "timestamp": "1774018878",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bd1ed1e-fcb1-48e6-9d4c-accc5f93080d",
        "value": "cn-nqsb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:18+00:00",
        "timestamp": "1774018878",
        "to_ids": true,
        "type": "domain",
        "uuid": "9296ece3-bac1-4e57-af82-5b86dd732c64",
        "value": "cn-nslq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:18+00:00",
        "timestamp": "1774018878",
        "to_ids": true,
        "type": "domain",
        "uuid": "6164407e-71da-4515-8fa3-a9a23f6525b3",
        "value": "cn-nspl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:18+00:00",
        "timestamp": "1774018878",
        "to_ids": true,
        "type": "domain",
        "uuid": "4817b354-e412-4c6a-b95a-91e5a2ee7bc1",
        "value": "cn-nu-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:18+00:00",
        "timestamp": "1774018878",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b9c0893-efb7-459d-8d28-accf2f1c72c7",
        "value": "cn-nuhd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:18+00:00",
        "timestamp": "1774018878",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ab801d7-3d19-442a-87ef-c171e8acc259",
        "value": "cn-nxlq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:18+00:00",
        "timestamp": "1774018879",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f3bad5a-e441-416c-a5ea-db78c18ef4b7",
        "value": "cn-nzk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:19+00:00",
        "timestamp": "1774018879",
        "to_ids": true,
        "type": "domain",
        "uuid": "437a18f8-67e7-44bb-a840-3ff411dd0894",
        "value": "cn-oa-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:19+00:00",
        "timestamp": "1774018879",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b9e84f4-f2d8-4a8a-9101-105d59069756",
        "value": "cn-oaqm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:19+00:00",
        "timestamp": "1774018879",
        "to_ids": true,
        "type": "domain",
        "uuid": "81256d2b-94da-4de2-af96-7740e55a3dd6",
        "value": "cn-odk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:19+00:00",
        "timestamp": "1774018879",
        "to_ids": true,
        "type": "domain",
        "uuid": "18723de2-cc18-443e-8bd0-c059e690d1a8",
        "value": "cn-op-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:19+00:00",
        "timestamp": "1774018879",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f77e2fe-58cc-4d40-8b25-1c291997a79e",
        "value": "cn-opzk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:19+00:00",
        "timestamp": "1774018879",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fab99f3-d368-4a4a-a046-b4fb33180857",
        "value": "cn-oqdz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:19+00:00",
        "timestamp": "1774018880",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fde3f87-2551-454b-9c37-8d434f076eb5",
        "value": "cn-oqrt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:20+00:00",
        "timestamp": "1774018880",
        "to_ids": true,
        "type": "domain",
        "uuid": "bed36ce1-09ea-4640-9d2c-1c9c2bdd889e",
        "value": "cn-oqrz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:20+00:00",
        "timestamp": "1774018880",
        "to_ids": true,
        "type": "domain",
        "uuid": "8486e63f-f81a-4477-b552-bf8c5796e064",
        "value": "cn-oqtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:20+00:00",
        "timestamp": "1774018880",
        "to_ids": true,
        "type": "domain",
        "uuid": "861fdc73-14cb-4175-9bc1-04a85e7dce2c",
        "value": "cn-oqv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:20+00:00",
        "timestamp": "1774018880",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a7c71dc-f828-4a4f-bbc0-85344daccc2c",
        "value": "cn-org-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:20+00:00",
        "timestamp": "1774018880",
        "to_ids": true,
        "type": "domain",
        "uuid": "511a3549-07ab-4cf4-bbb5-7c64ce3725d6",
        "value": "cn-otxk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:20+00:00",
        "timestamp": "1774018881",
        "to_ids": true,
        "type": "domain",
        "uuid": "48eadd83-4175-4d11-865f-a67387800e3d",
        "value": "cn-ovdr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:21+00:00",
        "timestamp": "1774018881",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2152f16-c21f-4b54-867a-00df6d30d23b",
        "value": "cn-oxbd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:21+00:00",
        "timestamp": "1774018881",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd7f77a8-e245-472e-981b-fd36821f16a3",
        "value": "cn-oxfg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:21+00:00",
        "timestamp": "1774018881",
        "to_ids": true,
        "type": "domain",
        "uuid": "827d9c98-45f3-48a8-80cb-e1e0953187e1",
        "value": "cn-oxkw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:21+00:00",
        "timestamp": "1774018881",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc3c3c86-8b89-4d21-a7a8-c80ae33c6e5d",
        "value": "cn-path-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:21+00:00",
        "timestamp": "1774018881",
        "to_ids": true,
        "type": "domain",
        "uuid": "0931b6c9-3f65-4389-911d-16aefb3b3343",
        "value": "cn-pdrq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:21+00:00",
        "timestamp": "1774018881",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e263c9d-d4c2-4205-8684-5c05a23cd1d5",
        "value": "cn-pld-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:21+00:00",
        "timestamp": "1774018882",
        "to_ids": true,
        "type": "domain",
        "uuid": "23ad53b6-5018-4000-88dd-7c63865dbff7",
        "value": "cn-pldk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:22+00:00",
        "timestamp": "1774018882",
        "to_ids": true,
        "type": "domain",
        "uuid": "c681fb61-50c3-4bfd-b5e1-c9d6b4822e21",
        "value": "cn-plmo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:22+00:00",
        "timestamp": "1774018882",
        "to_ids": true,
        "type": "domain",
        "uuid": "954d5bdc-3f5c-4f72-a900-8204b9c4bbb5",
        "value": "cn-pm-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:22+00:00",
        "timestamp": "1774018882",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b8d9835-95db-4ee7-92e1-f4d033345eeb",
        "value": "cn-pqbf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:22+00:00",
        "timestamp": "1774018882",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec1f4f28-1c7f-4940-b5c0-e3984c1c65fe",
        "value": "cn-prtm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:22+00:00",
        "timestamp": "1774018882",
        "to_ids": true,
        "type": "domain",
        "uuid": "acbc280c-a135-4683-926a-b81bf1583a0f",
        "value": "cn-prvq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:22+00:00",
        "timestamp": "1774018882",
        "to_ids": true,
        "type": "domain",
        "uuid": "03e30fa0-3b88-41a3-83ef-21cec3d4b317",
        "value": "cn-prxm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:23+00:00",
        "timestamp": "1774018883",
        "to_ids": true,
        "type": "domain",
        "uuid": "934a49be-6a30-4325-844a-bffd2777b03e",
        "value": "cn-pshd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:23+00:00",
        "timestamp": "1774018883",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0d36a7e-acdb-4865-82e7-c9f7167436ec",
        "value": "cn-pvzr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:23+00:00",
        "timestamp": "1774018883",
        "to_ids": true,
        "type": "domain",
        "uuid": "963d3425-7524-46c2-9829-bc15aa578004",
        "value": "cn-pxqk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:23+00:00",
        "timestamp": "1774018883",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc331a33-390f-4e63-a266-756cf3be838c",
        "value": "cn-pxtq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:23+00:00",
        "timestamp": "1774018883",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e86cc1e-8c9d-4d65-870a-e35a0cff2ddc",
        "value": "cn-qazx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:23+00:00",
        "timestamp": "1774018883",
        "to_ids": true,
        "type": "domain",
        "uuid": "3295b181-3715-4648-b5be-ecb9bfc63392",
        "value": "cn-qbxr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:23+00:00",
        "timestamp": "1774018884",
        "to_ids": true,
        "type": "domain",
        "uuid": "6baf39cc-6d5a-4e94-a3e8-ca7f2e5b0cfc",
        "value": "cn-qfnb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:24+00:00",
        "timestamp": "1774018884",
        "to_ids": true,
        "type": "domain",
        "uuid": "59192104-253d-4a8d-84d5-efbc25304b40",
        "value": "cn-qglt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:24+00:00",
        "timestamp": "1774018884",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a349ff6-f3bb-4a15-ba53-4d132e411e31",
        "value": "cn-qhv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:24+00:00",
        "timestamp": "1774018884",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cc654f2-943c-4b38-9682-faaa5a437f43",
        "value": "cn-qlnx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:24+00:00",
        "timestamp": "1774018884",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a6201ac-53ec-4ee1-8df8-063046b6bb9d",
        "value": "cn-qrlv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:24+00:00",
        "timestamp": "1774018884",
        "to_ids": true,
        "type": "domain",
        "uuid": "5aeae10d-2fa5-4287-8327-20b2dc0adfab",
        "value": "cn-qrvx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:24+00:00",
        "timestamp": "1774018884",
        "to_ids": true,
        "type": "domain",
        "uuid": "482d80b2-8726-43e0-8b6d-575607951dec",
        "value": "cn-qtbx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:24+00:00",
        "timestamp": "1774018885",
        "to_ids": true,
        "type": "domain",
        "uuid": "999d3051-0b05-46df-8976-57c6b66b6e4a",
        "value": "cn-qtm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:25+00:00",
        "timestamp": "1774018885",
        "to_ids": true,
        "type": "domain",
        "uuid": "783c4995-b666-4302-b22e-ae5940a0335a",
        "value": "cn-qvbd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:25+00:00",
        "timestamp": "1774018885",
        "to_ids": true,
        "type": "domain",
        "uuid": "303fd943-6d00-42f2-a165-89048f7ad3a3",
        "value": "cn-qvsd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:25+00:00",
        "timestamp": "1774018885",
        "to_ids": true,
        "type": "domain",
        "uuid": "671d7a31-1818-489e-963a-498f3a0000d6",
        "value": "cn-qvtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:25+00:00",
        "timestamp": "1774018885",
        "to_ids": true,
        "type": "domain",
        "uuid": "1178499b-be13-40e2-a445-7f37e462ec0f",
        "value": "cn-qwer-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:25+00:00",
        "timestamp": "1774018885",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7deccc3-3b39-45c5-8ad7-a09ddb57e090",
        "value": "cn-qzmk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:25+00:00",
        "timestamp": "1774018885",
        "to_ids": true,
        "type": "domain",
        "uuid": "33f18539-afad-48b3-8e42-a19e08570703",
        "value": "cn-reu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:26+00:00",
        "timestamp": "1774018886",
        "to_ids": true,
        "type": "domain",
        "uuid": "881f85b4-3dc5-438d-9cd1-182f66a9729b",
        "value": "cn-rgtx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:26+00:00",
        "timestamp": "1774018886",
        "to_ids": true,
        "type": "domain",
        "uuid": "74acdabf-50b0-4bc3-afd9-42082b6296ac",
        "value": "cn-rjtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:26+00:00",
        "timestamp": "1774018886",
        "to_ids": true,
        "type": "domain",
        "uuid": "97fbe371-882d-45ff-9e00-e2143d625f2c",
        "value": "cn-rklw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:26+00:00",
        "timestamp": "1774018886",
        "to_ids": true,
        "type": "domain",
        "uuid": "00909481-f7c9-465f-bd2b-142f101afe0d",
        "value": "cn-rldv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:26+00:00",
        "timestamp": "1774018886",
        "to_ids": true,
        "type": "domain",
        "uuid": "c423dc38-22de-440a-acc3-2b7f7a307ba7",
        "value": "cn-rtak-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:26+00:00",
        "timestamp": "1774018886",
        "to_ids": true,
        "type": "domain",
        "uuid": "202936b7-3d7e-474c-a424-68e1812af3f8",
        "value": "cn-rtnp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:26+00:00",
        "timestamp": "1774018887",
        "to_ids": true,
        "type": "domain",
        "uuid": "93dc6afb-6282-4144-823e-6dda0cbc7080",
        "value": "cn-rtxb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:27+00:00",
        "timestamp": "1774018887",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b1916a1-44d9-415b-b142-9842e95ef8f4",
        "value": "cn-rvzl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:27+00:00",
        "timestamp": "1774018887",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3688686-31fe-4ddd-8279-0305dea721b6",
        "value": "cn-rw-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:27+00:00",
        "timestamp": "1774018887",
        "to_ids": true,
        "type": "domain",
        "uuid": "bae72f35-9628-47b7-94f3-bce2db04fdf7",
        "value": "cn-rwxp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:27+00:00",
        "timestamp": "1774018887",
        "to_ids": true,
        "type": "domain",
        "uuid": "af624ef5-bc87-49aa-a328-1139e78f681b",
        "value": "cn-rzdp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:27+00:00",
        "timestamp": "1774018887",
        "to_ids": true,
        "type": "domain",
        "uuid": "e678e5ce-702e-4420-af75-4f1420a4f300",
        "value": "cn-rzmp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:27+00:00",
        "timestamp": "1774018887",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1573d61-29ec-4d95-a5ce-27efb642f8e9",
        "value": "cn-sbgx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:27+00:00",
        "timestamp": "1774018888",
        "to_ids": true,
        "type": "domain",
        "uuid": "577ed302-c91a-4ce0-88a9-dba8a0010db4",
        "value": "cn-sbxf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:28+00:00",
        "timestamp": "1774018888",
        "to_ids": true,
        "type": "domain",
        "uuid": "f80b535b-b667-4de5-838d-67f48296bdac",
        "value": "cn-sdty-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:28+00:00",
        "timestamp": "1774018888",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5789aa8-6b00-4964-a906-da3d555cb4fd",
        "value": "cn-sfbw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:28+00:00",
        "timestamp": "1774018888",
        "to_ids": true,
        "type": "domain",
        "uuid": "f065d7bb-c7b7-40c7-a559-9aa3351d10df",
        "value": "cn-si-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:28+00:00",
        "timestamp": "1774018888",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9991729-06a8-4b45-be67-a015b489c87a",
        "value": "cn-sj-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:28+00:00",
        "timestamp": "1774018888",
        "to_ids": true,
        "type": "domain",
        "uuid": "76648d5b-4bde-42f0-9a94-2850cc902b48",
        "value": "cn-sjla-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:28+00:00",
        "timestamp": "1774018888",
        "to_ids": true,
        "type": "domain",
        "uuid": "213ddf88-b0da-4b99-97c8-d8783c874033",
        "value": "cn-skqp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:28+00:00",
        "timestamp": "1774018889",
        "to_ids": true,
        "type": "domain",
        "uuid": "48fd9064-56c9-4c19-ac51-21c48a7eb23f",
        "value": "cn-skwm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:29+00:00",
        "timestamp": "1774018889",
        "to_ids": true,
        "type": "domain",
        "uuid": "50fd6b76-b492-4b66-99fd-249970fbbc38",
        "value": "cn-smhr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:29+00:00",
        "timestamp": "1774018889",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a4e2669-02bf-42f1-b6c2-85463afa6930",
        "value": "cn-sne-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:29+00:00",
        "timestamp": "1774018889",
        "to_ids": true,
        "type": "domain",
        "uuid": "605b8174-1d1c-45fd-b709-2b555a6e286f",
        "value": "cn-snjk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:29+00:00",
        "timestamp": "1774018889",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ba7f302-1c35-46d4-9a08-d11bd457fd42",
        "value": "cn-space-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:29+00:00",
        "timestamp": "1774018889",
        "to_ids": true,
        "type": "domain",
        "uuid": "611a008a-692f-4261-a7af-3a0b8f91f7c6",
        "value": "cn-sptq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:29+00:00",
        "timestamp": "1774018889",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a61c21a-1206-4b6c-a4ea-7808c8a1baf1",
        "value": "cn-svmt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:29+00:00",
        "timestamp": "1774018890",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fc3f3aa-a271-405f-b3e6-7e077c227cae",
        "value": "cn-svqk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:30+00:00",
        "timestamp": "1774018890",
        "to_ids": true,
        "type": "domain",
        "uuid": "05ee6e66-32ca-4fe3-8d7f-0c8ba484ad84",
        "value": "cn-swmp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:30+00:00",
        "timestamp": "1774018890",
        "to_ids": true,
        "type": "domain",
        "uuid": "4190d3de-abf8-43d8-990c-df07eedfc4e5",
        "value": "cn-sxl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:30+00:00",
        "timestamp": "1774018890",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4d2150c-e567-4204-9270-847849abf49a",
        "value": "cn-sxlf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:30+00:00",
        "timestamp": "1774018890",
        "to_ids": true,
        "type": "domain",
        "uuid": "2422efee-61bc-4acf-bfa6-ff3a4d2b1322",
        "value": "cn-sync-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:30+00:00",
        "timestamp": "1774018890",
        "to_ids": true,
        "type": "domain",
        "uuid": "c68c26a4-54f5-40e2-8df4-dfb792048e6a",
        "value": "cn-ta-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:30+00:00",
        "timestamp": "1774018890",
        "to_ids": true,
        "type": "domain",
        "uuid": "bde56fbe-a36f-4187-b6c0-98b8438634e1",
        "value": "cn-tbn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:30+00:00",
        "timestamp": "1774018891",
        "to_ids": true,
        "type": "domain",
        "uuid": "42bd78ff-c151-47d8-9207-ae7af6ca5d94",
        "value": "cn-tbyu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:31+00:00",
        "timestamp": "1774018891",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8cb03cb-91d9-4354-bb4e-4b8d50b6e78f",
        "value": "cn-td-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:31+00:00",
        "timestamp": "1774018891",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0279746-ceed-4ff2-9df4-26b78655d50e",
        "value": "cn-tdza-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:31+00:00",
        "timestamp": "1774018891",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd0f0505-cdae-4ce7-938d-dc533f9b327d",
        "value": "cn-tga-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:31+00:00",
        "timestamp": "1774018891",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d270a0e-5d1f-44cf-a4cb-2f75355e89f4",
        "value": "cn-ti-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:31+00:00",
        "timestamp": "1774018891",
        "to_ids": true,
        "type": "domain",
        "uuid": "c89fa4a8-a212-4dea-a89a-51a5c17c6a68",
        "value": "cn-tj-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:31+00:00",
        "timestamp": "1774018892",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed109e0d-4b67-4db2-bdb9-f6d3e0f33c0d",
        "value": "cn-tjqb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:32+00:00",
        "timestamp": "1774018892",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee0c9e05-8cfa-45b7-87f3-e51d4683f75b",
        "value": "cn-tkpb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:32+00:00",
        "timestamp": "1774018892",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c369250-594e-4a7a-ab8a-260e5b0c5987",
        "value": "cn-tkpz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:32+00:00",
        "timestamp": "1774018892",
        "to_ids": true,
        "type": "domain",
        "uuid": "886f9f1a-7c8e-4a7e-987c-55e5378716b7",
        "value": "cn-tldv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:32+00:00",
        "timestamp": "1774018892",
        "to_ids": true,
        "type": "domain",
        "uuid": "d563142b-086b-4d2c-8f91-af395f402464",
        "value": "cn-tmsv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:32+00:00",
        "timestamp": "1774018892",
        "to_ids": true,
        "type": "domain",
        "uuid": "f276c38a-00ad-473a-813d-272fbdb58109",
        "value": "cn-tp-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:32+00:00",
        "timestamp": "1774018892",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8f29c18-a04f-471a-ac36-eae9eb7f90ee",
        "value": "cn-tpzk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:32+00:00",
        "timestamp": "1774018893",
        "to_ids": true,
        "type": "domain",
        "uuid": "d94ba883-afbd-49b7-a028-1b5e9e0e3f9b",
        "value": "cn-tqnp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:33+00:00",
        "timestamp": "1774018893",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e6161ab-721e-4b57-a93f-06b3668b32fd",
        "value": "cn-tqnv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:33+00:00",
        "timestamp": "1774018893",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c1c4b9b-642c-4978-b68e-92ee275048e5",
        "value": "cn-tqpl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:33+00:00",
        "timestamp": "1774018893",
        "to_ids": true,
        "type": "domain",
        "uuid": "26f2fcc8-130e-4906-8d94-992bf66606a2",
        "value": "cn-trwb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:33+00:00",
        "timestamp": "1774018893",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d4e3b79-fc4b-48fb-bf15-a329ac63249a",
        "value": "cn-twbx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:33+00:00",
        "timestamp": "1774018893",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d235bb4-7beb-4f62-8435-e18964a152f3",
        "value": "cn-twqk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:33+00:00",
        "timestamp": "1774018893",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfbdcd3a-e38e-4f9f-a49d-8078cf130609",
        "value": "cn-tyua-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:33+00:00",
        "timestamp": "1774018894",
        "to_ids": true,
        "type": "domain",
        "uuid": "5920ffd8-534f-4a4b-a118-acc778b39000",
        "value": "cn-uqbd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:34+00:00",
        "timestamp": "1774018894",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac183340-f7a6-4961-9b6d-ce7ff9155667",
        "value": "cn-uqxr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:34+00:00",
        "timestamp": "1774018894",
        "to_ids": true,
        "type": "domain",
        "uuid": "00ec2599-3733-4c89-9cc7-826b2551bfcc",
        "value": "cn-uroq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:34+00:00",
        "timestamp": "1774018894",
        "to_ids": true,
        "type": "domain",
        "uuid": "87a8e646-7520-409a-a8fc-ad6299758ebf",
        "value": "cn-utzx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:34+00:00",
        "timestamp": "1774018894",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4591335-ef4b-4934-81a3-c35c25653726",
        "value": "cn-uvgl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:34+00:00",
        "timestamp": "1774018894",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f9eeb73-24bc-4993-8657-0a6c0ecfe55a",
        "value": "cn-uvjd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:34+00:00",
        "timestamp": "1774018894",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c8f996c-1442-4072-ad1a-d7016a28479e",
        "value": "cn-uvkm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:34+00:00",
        "timestamp": "1774018895",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf8f3ec2-1e9b-4af9-9e46-51b3905336a0",
        "value": "cn-uvmq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:35+00:00",
        "timestamp": "1774018895",
        "to_ids": true,
        "type": "domain",
        "uuid": "8def2ff8-f13f-48e2-9419-812fdd87ef07",
        "value": "cn-uvnp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:35+00:00",
        "timestamp": "1774018895",
        "to_ids": true,
        "type": "domain",
        "uuid": "14c6c71a-9bb6-4748-8d2b-2dff5f592624",
        "value": "cn-uxnp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:35+00:00",
        "timestamp": "1774018895",
        "to_ids": true,
        "type": "domain",
        "uuid": "403c7c44-ff9b-423e-a536-94a5796111c7",
        "value": "cn-vc-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:35+00:00",
        "timestamp": "1774018895",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cb5c461-24fd-44b9-b0c7-5af4e8c63aeb",
        "value": "cn-vc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:35+00:00",
        "timestamp": "1774018895",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c2d46b7-6aad-44f4-ace9-d908a69c05fc",
        "value": "cn-vceq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:35+00:00",
        "timestamp": "1774018896",
        "to_ids": true,
        "type": "domain",
        "uuid": "39909ff1-f2fa-4253-8108-01e1872513a7",
        "value": "cn-vfdp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:36+00:00",
        "timestamp": "1774018896",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd996197-cb72-477b-8fa5-d64541908046",
        "value": "cn-vhnq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:36+00:00",
        "timestamp": "1774018896",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b0bf68c-b11a-44ba-ac00-54e5a33357e2",
        "value": "cn-vka-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:36+00:00",
        "timestamp": "1774018896",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a54ee28-55c5-40d6-a019-e63ff667e14e",
        "value": "cn-vktr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:36+00:00",
        "timestamp": "1774018896",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd8f3af5-7d49-4aae-ac27-39d623e0dc7e",
        "value": "cn-vmpq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:36+00:00",
        "timestamp": "1774018896",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec5708cc-32f5-400e-9b25-f3111621c440",
        "value": "cn-vnbd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:36+00:00",
        "timestamp": "1774018896",
        "to_ids": true,
        "type": "domain",
        "uuid": "495c7c75-92fe-46eb-85d5-55d8e1a20078",
        "value": "cn-vnxc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:36+00:00",
        "timestamp": "1774018897",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2c350a1-09b8-43f4-a0fa-016ae89f6704",
        "value": "cn-vpia-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:37+00:00",
        "timestamp": "1774018897",
        "to_ids": true,
        "type": "domain",
        "uuid": "daa862fa-a4e7-4992-8daa-1f4d2bad3382",
        "value": "cn-vpxq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:37+00:00",
        "timestamp": "1774018897",
        "to_ids": true,
        "type": "domain",
        "uuid": "125ad765-ed5c-49c7-bdf7-1aea086ad07f",
        "value": "cn-vqtl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:37+00:00",
        "timestamp": "1774018897",
        "to_ids": true,
        "type": "domain",
        "uuid": "00999d35-6653-483b-9a46-74628983b23b",
        "value": "cn-vu-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:37+00:00",
        "timestamp": "1774018897",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c4157fe-2b15-4bff-8b3f-913a43271bf7",
        "value": "cn-vubk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:37+00:00",
        "timestamp": "1774018897",
        "to_ids": true,
        "type": "domain",
        "uuid": "56d5d1ff-463c-4926-a666-844d1273ab8a",
        "value": "cn-vxqb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:37+00:00",
        "timestamp": "1774018897",
        "to_ids": true,
        "type": "domain",
        "uuid": "744be4c6-36c8-40ac-97a2-5354bfd1bc5b",
        "value": "cn-vyuq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:37+00:00",
        "timestamp": "1774018898",
        "to_ids": true,
        "type": "domain",
        "uuid": "dac1254e-a03c-490b-a53c-6e5637fdc4b6",
        "value": "cn-web-org-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:38+00:00",
        "timestamp": "1774018898",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddcebb4a-ce91-400d-88a3-6a669de72511",
        "value": "cn-wk-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:38+00:00",
        "timestamp": "1774018898",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffdf7e83-83c3-4285-82fc-dea5d953d7c6",
        "value": "cn-wkht-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:38+00:00",
        "timestamp": "1774018898",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bd099f5-6c6f-47de-82d3-94402a8aa78a",
        "value": "cn-wkp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:38+00:00",
        "timestamp": "1774018898",
        "to_ids": true,
        "type": "domain",
        "uuid": "cec8d990-e533-4512-ba86-b0e93d1cb67f",
        "value": "cn-wkrd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:38+00:00",
        "timestamp": "1774018898",
        "to_ids": true,
        "type": "domain",
        "uuid": "244a4343-a839-462a-98cc-0423822f877e",
        "value": "cn-wkrq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:38+00:00",
        "timestamp": "1774018899",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f1dba74-f6e7-4ef7-bf1c-becca4e050ce",
        "value": "cn-wldq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:39+00:00",
        "timestamp": "1774018899",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a97a10b-41e5-4cc7-94c1-aa89245e9bba",
        "value": "cn-wmlx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:39+00:00",
        "timestamp": "1774018899",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ac22c07-f8f0-42c9-8a68-0be2d0db0720",
        "value": "cn-wmrx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:39+00:00",
        "timestamp": "1774018899",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3a379bc-ce6b-4f85-af36-55c01192bff5",
        "value": "cn-wplm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:39+00:00",
        "timestamp": "1774018899",
        "to_ids": true,
        "type": "domain",
        "uuid": "11c0e459-2f0f-4f24-bbe4-732757c0db80",
        "value": "cn-wqfp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:39+00:00",
        "timestamp": "1774018899",
        "to_ids": true,
        "type": "domain",
        "uuid": "36c415dc-0952-4ddd-a7bb-bd8c41b8a15e",
        "value": "cn-wrzk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:39+00:00",
        "timestamp": "1774018899",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b814c3d-5732-41ab-9744-d2140fce011d",
        "value": "cn-wtop-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:39+00:00",
        "timestamp": "1774018900",
        "to_ids": true,
        "type": "domain",
        "uuid": "144cb419-33d0-4418-9a1a-ee8bc2d9942c",
        "value": "cn-wzdb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:40+00:00",
        "timestamp": "1774018900",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f85890d-a4b3-4635-9f87-c5ffeeac7b6b",
        "value": "cn-wzmb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:40+00:00",
        "timestamp": "1774018900",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f5db667-f6a8-4976-9205-1970bcf99985",
        "value": "cn-wzop-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:40+00:00",
        "timestamp": "1774018900",
        "to_ids": true,
        "type": "domain",
        "uuid": "4425f47c-3ac6-4335-9e8b-a4e994ba7fd2",
        "value": "cn-xe-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:40+00:00",
        "timestamp": "1774018900",
        "to_ids": true,
        "type": "domain",
        "uuid": "05e6a402-ab77-4a9e-9fbe-4edc8158a972",
        "value": "cn-xf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:40+00:00",
        "timestamp": "1774018900",
        "to_ids": true,
        "type": "domain",
        "uuid": "0211ac4d-94f6-4062-9d18-4e64f960444a",
        "value": "cn-xgpf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:40+00:00",
        "timestamp": "1774018901",
        "to_ids": true,
        "type": "domain",
        "uuid": "86a2803d-47ca-4d0f-b24d-9b2b359327e0",
        "value": "cn-xgpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:41+00:00",
        "timestamp": "1774018901",
        "to_ids": true,
        "type": "domain",
        "uuid": "db4822b0-9116-4d34-b0e6-818d79973fb4",
        "value": "cn-xkdf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:41+00:00",
        "timestamp": "1774018901",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e78b92a-165f-4071-93af-e2833a40f332",
        "value": "cn-xmbf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:41+00:00",
        "timestamp": "1774018901",
        "to_ids": true,
        "type": "domain",
        "uuid": "9aac40dc-a5bc-4983-bb9d-6a69ed8af6a5",
        "value": "cn-xmf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:41+00:00",
        "timestamp": "1774018901",
        "to_ids": true,
        "type": "domain",
        "uuid": "159c69d0-6f7a-4d84-b2be-9b856e64d3f0",
        "value": "cn-xmpl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:41+00:00",
        "timestamp": "1774018901",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ab36d81-12e6-4c95-8bf4-f7f4570757c7",
        "value": "cn-xqpv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:41+00:00",
        "timestamp": "1774018901",
        "to_ids": true,
        "type": "domain",
        "uuid": "22f4087a-5b19-4a84-82ef-06d58aa51073",
        "value": "cn-xqtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:41+00:00",
        "timestamp": "1774018902",
        "to_ids": true,
        "type": "domain",
        "uuid": "8853ece4-bb01-4296-8748-1663716940d5",
        "value": "cn-xra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:42+00:00",
        "timestamp": "1774018902",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ae4e786-de9b-49a2-9c68-8a1128af178e",
        "value": "cn-xrab-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:42+00:00",
        "timestamp": "1774018902",
        "to_ids": true,
        "type": "domain",
        "uuid": "640792c9-7119-48ad-83b5-adc7d0816d7b",
        "value": "cn-xrvk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:42+00:00",
        "timestamp": "1774018902",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6f67724-8b35-43a5-b667-634d398154e9",
        "value": "cn-xvbr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:42+00:00",
        "timestamp": "1774018902",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddaee3b0-46fb-434f-999c-574c029ff6e1",
        "value": "cn-xvkm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:42+00:00",
        "timestamp": "1774018902",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6258e19-1d1b-43ab-9ef7-2c7f215dd745",
        "value": "cn-xztr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:42+00:00",
        "timestamp": "1774018902",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6f80166-8b1e-4770-a4f2-088c9ab8206b",
        "value": "cn-yfs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:42+00:00",
        "timestamp": "1774018903",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1d3a945-fef0-40d8-a908-5f048bd977f5",
        "value": "cn-yldk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:43+00:00",
        "timestamp": "1774018903",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e44acc4-f891-403b-8a77-b3608b6fc351",
        "value": "cn-ylqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:43+00:00",
        "timestamp": "1774018903",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ff79250-a23e-41d7-a8db-7f5866c7278b",
        "value": "cn-yqmv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:43+00:00",
        "timestamp": "1774018903",
        "to_ids": true,
        "type": "domain",
        "uuid": "afa5967b-01ac-4bc6-bc48-10b841d23be3",
        "value": "cn-yqsn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:43+00:00",
        "timestamp": "1774018903",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d817ae9-15b9-4ffd-8c3a-6a5c9bb340af",
        "value": "cn-yqtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:43+00:00",
        "timestamp": "1774018903",
        "to_ids": true,
        "type": "domain",
        "uuid": "8851ce01-c47b-4397-bc63-1eff04d54ca8",
        "value": "cn-yqzr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:43+00:00",
        "timestamp": "1774018904",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb842cd5-ff31-4534-bdc5-66c19f322433",
        "value": "cn-yzkb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:44+00:00",
        "timestamp": "1774018904",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ea3e575-cf12-4a08-ad84-95f5084c5efb",
        "value": "cn-zbdp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:44+00:00",
        "timestamp": "1774018904",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cc42766-c7ee-4c0f-894e-441d0d85fe92",
        "value": "cn-zbfr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:44+00:00",
        "timestamp": "1774018904",
        "to_ids": true,
        "type": "domain",
        "uuid": "a19c4372-c8dd-42a7-968c-75882ba479fe",
        "value": "cn-zbht-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:44+00:00",
        "timestamp": "1774018904",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a8284db-d83c-4d17-ba3f-dc4d9d375eb2",
        "value": "cn-zc-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:44+00:00",
        "timestamp": "1774018904",
        "to_ids": true,
        "type": "domain",
        "uuid": "39f69506-6cf9-4de7-bbcb-c452da9da4e9",
        "value": "cn-zcrl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:44+00:00",
        "timestamp": "1774018904",
        "to_ids": true,
        "type": "domain",
        "uuid": "e60965c1-cea8-45ce-96a4-24f14a88b625",
        "value": "cn-zg-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:44+00:00",
        "timestamp": "1774018905",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c39d2f1-228d-4a76-9fa5-1583fc60d963",
        "value": "cn-zgd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:45+00:00",
        "timestamp": "1774018905",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf3f961b-9037-4d1a-8951-6e0b4a6b1169",
        "value": "cn-zgit-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:45+00:00",
        "timestamp": "1774018905",
        "to_ids": true,
        "type": "domain",
        "uuid": "15920058-f1a4-47fc-804b-397cfca5d3f7",
        "value": "cn-zmbp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:45+00:00",
        "timestamp": "1774018905",
        "to_ids": true,
        "type": "domain",
        "uuid": "1607e276-c650-416c-9f62-668bda7ab6a5",
        "value": "cn-zplf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:45+00:00",
        "timestamp": "1774018905",
        "to_ids": true,
        "type": "domain",
        "uuid": "adbb08ce-7f9a-4f13-bbb6-e4ba91708890",
        "value": "cn-zpmf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:45+00:00",
        "timestamp": "1774018905",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5591a5c-14e0-437f-82d7-a9528c6da987",
        "value": "cn-zq-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:45+00:00",
        "timestamp": "1774018905",
        "to_ids": true,
        "type": "domain",
        "uuid": "8df0e409-4270-4516-b8cc-3824864599cb",
        "value": "cn-zqnb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:45+00:00",
        "timestamp": "1774018906",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b8c7a22-d012-41a8-83f2-a4c5d033fce1",
        "value": "cn-zv-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:46+00:00",
        "timestamp": "1774018906",
        "to_ids": true,
        "type": "domain",
        "uuid": "2730f9b9-529b-4f02-ac50-85591e028ab7",
        "value": "cn-zvcp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:46+00:00",
        "timestamp": "1774018906",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3f5d141-af66-4110-9157-23b2fb1d4b2f",
        "value": "cnh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:46+00:00",
        "timestamp": "1774018906",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc665a14-797c-4cd6-a027-8bc2f19c0fea",
        "value": "connect-app-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:46+00:00",
        "timestamp": "1774018906",
        "to_ids": true,
        "type": "domain",
        "uuid": "854abf83-e6f6-439e-a426-fc12ccf925b8",
        "value": "core-web-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:46+00:00",
        "timestamp": "1774018906",
        "to_ids": true,
        "type": "domain",
        "uuid": "c19e6401-fc7a-4f9e-9856-201a1b3971ff",
        "value": "corex-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:46+00:00",
        "timestamp": "1774018906",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7766816-7be1-4ea1-92ed-7cdd947b22f8",
        "value": "cpg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:47+00:00",
        "timestamp": "1774018907",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8d5cc3a-7fc7-4f3a-86ae-2f8a95187d73",
        "value": "cq.mpg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:47+00:00",
        "timestamp": "1774018907",
        "to_ids": true,
        "type": "domain",
        "uuid": "87cfeb0a-9797-4c80-aec4-a641c87a1450",
        "value": "cqr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:47+00:00",
        "timestamp": "1774018907",
        "to_ids": true,
        "type": "domain",
        "uuid": "3276460c-0f5f-43cc-97c6-c9954dc16f6b",
        "value": "cqr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:47+00:00",
        "timestamp": "1774018907",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bb6b44c-e365-4594-a523-b517a3132ab8",
        "value": "cs.dpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:47+00:00",
        "timestamp": "1774018907",
        "to_ids": true,
        "type": "domain",
        "uuid": "91b722e0-ed6f-485b-b4f6-a3c40b4fa2c9",
        "value": "ct.lmn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:47+00:00",
        "timestamp": "1774018907",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4c1d6bc-e50a-4b34-910e-08d5072f2aea",
        "value": "cu.xjf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:47+00:00",
        "timestamp": "1774018908",
        "to_ids": true,
        "type": "domain",
        "uuid": "05ae80b2-51ad-44ce-a405-fdb5703c602f",
        "value": "cvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:48+00:00",
        "timestamp": "1774018908",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9114942-a153-422b-8581-589f0e952ac8",
        "value": "cvw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:48+00:00",
        "timestamp": "1774018908",
        "to_ids": true,
        "type": "domain",
        "uuid": "df4adfb6-013c-4722-98c6-dc3e9f241491",
        "value": "cw.ori-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:48+00:00",
        "timestamp": "1774018908",
        "to_ids": true,
        "type": "domain",
        "uuid": "43c4fb4e-7cc0-421d-8c06-51ab20a16535",
        "value": "cwl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:48+00:00",
        "timestamp": "1774018908",
        "to_ids": true,
        "type": "domain",
        "uuid": "89773067-66cb-4e19-8fdc-7a96ae640ad5",
        "value": "cxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:48+00:00",
        "timestamp": "1774018908",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e90a11d-0d73-405c-a35c-fbcb6e20c9aa",
        "value": "cxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:48+00:00",
        "timestamp": "1774018908",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcda26c7-5506-46bb-adef-a050e2faa9ab",
        "value": "cy.dzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:48+00:00",
        "timestamp": "1774018909",
        "to_ids": true,
        "type": "domain",
        "uuid": "51d1f613-c1da-4f3f-807c-ade1e801792e",
        "value": "cyd-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:49+00:00",
        "timestamp": "1774018909",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdc42343-4375-4a83-9906-db5bae3aae14",
        "value": "czb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:49+00:00",
        "timestamp": "1774018909",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1c44bf8-c183-4f71-a337-ba96e3195f3c",
        "value": "czr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:49+00:00",
        "timestamp": "1774018909",
        "to_ids": true,
        "type": "domain",
        "uuid": "13a8f16c-e483-4370-b2e8-905d2dbd5452",
        "value": "d-app-e-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:49+00:00",
        "timestamp": "1774018909",
        "to_ids": true,
        "type": "domain",
        "uuid": "54085c26-4bfd-424b-93bd-3b33ff0feb9c",
        "value": "d-c-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:49+00:00",
        "timestamp": "1774018909",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f1dc0de-7ffa-4885-9823-405c444f9850",
        "value": "d-im-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:49+00:00",
        "timestamp": "1774018909",
        "to_ids": true,
        "type": "domain",
        "uuid": "a449bacc-7b14-4080-bb4e-68ebd9d9d34b",
        "value": "d-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:49+00:00",
        "timestamp": "1774018910",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2f91303-9718-4030-8ba9-d99bb18e91e1",
        "value": "d-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:50+00:00",
        "timestamp": "1774018910",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bfc69e4-dc91-4000-b7ee-8d5749fa9fa3",
        "value": "d-wap-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:50+00:00",
        "timestamp": "1774018910",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8120604-3184-423e-a7cb-8559419f2ca8",
        "value": "d8.pzl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:50+00:00",
        "timestamp": "1774018910",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ebaea83-6d85-4b1f-a916-aae3b6015c9e",
        "value": "dac-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:50+00:00",
        "timestamp": "1774018910",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fb0ba42-8ebe-47eb-a0f1-5b835eba934a",
        "value": "data-web-sg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:50+00:00",
        "timestamp": "1774018910",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d3db552-a6f7-421c-a8e2-f3acb57c4585",
        "value": "dax-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:50+00:00",
        "timestamp": "1774018910",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb9fd4c7-88c3-401f-a17d-4b1c52635b37",
        "value": "defg.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:50+00:00",
        "timestamp": "1774018911",
        "to_ids": true,
        "type": "domain",
        "uuid": "130ada05-8b5c-465e-af0b-d47f7e3cd4e4",
        "value": "desk-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:51+00:00",
        "timestamp": "1774018911",
        "to_ids": true,
        "type": "domain",
        "uuid": "0620245b-71d3-4f23-816c-cf0e5b4d2ad6",
        "value": "dfh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:51+00:00",
        "timestamp": "1774018911",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d969e7b-9734-4597-85c2-4a5669812eba",
        "value": "dfv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:51+00:00",
        "timestamp": "1774018911",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bff4e7d-60ef-43ce-9856-6a32d5162a41",
        "value": "dge-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:51+00:00",
        "timestamp": "1774018911",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ffafd25-0283-467e-9287-d84a4eead8ce",
        "value": "dge-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:51+00:00",
        "timestamp": "1774018911",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ab71480-ec92-4bdd-82a5-71507a5c861a",
        "value": "dgv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:51+00:00",
        "timestamp": "1774018912",
        "to_ids": true,
        "type": "domain",
        "uuid": "7dbe36c0-0871-4b9d-92e4-349d712f6ad1",
        "value": "dhi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:52+00:00",
        "timestamp": "1774018912",
        "to_ids": true,
        "type": "domain",
        "uuid": "58b646bb-f3df-49d2-b8c1-051fc85948c0",
        "value": "dhx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:52+00:00",
        "timestamp": "1774018912",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a57b713-ac37-46a7-a775-f3744bee8e28",
        "value": "dik-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:52+00:00",
        "timestamp": "1774018912",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8d4cee6-296d-4ebd-a6b8-e5dff5445071",
        "value": "djt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:52+00:00",
        "timestamp": "1774018912",
        "to_ids": true,
        "type": "domain",
        "uuid": "4456ab6f-6c6a-4c9b-a4a5-ebdf2b6ada89",
        "value": "dkv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:52+00:00",
        "timestamp": "1774018912",
        "to_ids": true,
        "type": "domain",
        "uuid": "652fba63-8a52-4057-8740-ca83390e08c6",
        "value": "dlp-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:52+00:00",
        "timestamp": "1774018912",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e954179-6a6f-461d-92ca-9d440949202e",
        "value": "dm.twy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:52+00:00",
        "timestamp": "1774018913",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd50168d-fc5e-4729-80bb-e92e940d4a42",
        "value": "dnp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:53+00:00",
        "timestamp": "1774018913",
        "to_ids": true,
        "type": "domain",
        "uuid": "f666d1e1-7fab-4091-969a-c6d9a3e66ae7",
        "value": "dpf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:53+00:00",
        "timestamp": "1774018913",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e810a71-bd70-42c0-ac15-6723218ba078",
        "value": "dpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:53+00:00",
        "timestamp": "1774018913",
        "to_ids": true,
        "type": "domain",
        "uuid": "a37ba5b4-1a8c-4595-85f4-90ca6455237d",
        "value": "dqm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:53+00:00",
        "timestamp": "1774018913",
        "to_ids": true,
        "type": "domain",
        "uuid": "df94d007-da0a-4a5f-98b2-264aefa86445",
        "value": "dqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:53+00:00",
        "timestamp": "1774018913",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb4e1b20-e3c9-4dd8-a13e-07cd4273dcd8",
        "value": "dra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:53+00:00",
        "timestamp": "1774018913",
        "to_ids": true,
        "type": "domain",
        "uuid": "325ade4d-2436-40c0-a1ff-5deaec2f4180",
        "value": "dst-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:53+00:00",
        "timestamp": "1774018914",
        "to_ids": true,
        "type": "domain",
        "uuid": "604eb823-ae4b-4248-893b-aa01d8af7674",
        "value": "dvw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:54+00:00",
        "timestamp": "1774018914",
        "to_ids": true,
        "type": "domain",
        "uuid": "f54377a4-65ca-4a70-8268-ac97cefadf57",
        "value": "dxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:54+00:00",
        "timestamp": "1774018914",
        "to_ids": true,
        "type": "domain",
        "uuid": "3df1181b-9475-4153-b354-b57dd6640415",
        "value": "dzb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:54+00:00",
        "timestamp": "1774018914",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecb691be-b663-477c-be88-db1711a99b93",
        "value": "dze-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:54+00:00",
        "timestamp": "1774018914",
        "to_ids": true,
        "type": "domain",
        "uuid": "0aab05f5-f1b5-4bed-a2ed-32724d34c9c3",
        "value": "dzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:54+00:00",
        "timestamp": "1774018914",
        "to_ids": true,
        "type": "domain",
        "uuid": "9989ed8f-28b5-4335-b705-0230e531ba81",
        "value": "e-app-g-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:54+00:00",
        "timestamp": "1774018915",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dd2e645-4f2f-4557-a372-9f2a90fd4c38",
        "value": "e-f-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:55+00:00",
        "timestamp": "1774018915",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3cd5f83-3633-422f-bb95-a0526c5e50b2",
        "value": "e-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:55+00:00",
        "timestamp": "1774018915",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbaa34f5-b460-4a78-8a13-73eede7811a1",
        "value": "e-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:55+00:00",
        "timestamp": "1774018915",
        "to_ids": true,
        "type": "domain",
        "uuid": "44fa8ee6-0377-40db-9b4b-c0b150caf0f9",
        "value": "e-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:55+00:00",
        "timestamp": "1774018915",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fe65676-91e1-41b8-b78d-50ac77e48162",
        "value": "e-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:55+00:00",
        "timestamp": "1774018915",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7bcda84-4e5f-489c-b7f3-d2b172003f34",
        "value": "e-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:55+00:00",
        "timestamp": "1774018915",
        "to_ids": true,
        "type": "domain",
        "uuid": "27c2efd2-a9e1-4519-ab52-3b3ffc8dcc61",
        "value": "e-wap-g-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:55+00:00",
        "timestamp": "1774018916",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4b5f606-0495-41e9-b5f5-916c75299a45",
        "value": "e6.whatsappapi.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:56+00:00",
        "timestamp": "1774018916",
        "to_ids": true,
        "type": "domain",
        "uuid": "975c8713-697a-4f4a-beae-c1c7d0b7d0ae",
        "value": "eaf-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:56+00:00",
        "timestamp": "1774018916",
        "to_ids": true,
        "type": "domain",
        "uuid": "2399af2a-d0b6-40e4-bc88-f67c6c46269d",
        "value": "eaf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:56+00:00",
        "timestamp": "1774018916",
        "to_ids": true,
        "type": "domain",
        "uuid": "228342f4-474d-4f6f-887a-264be9bf7809",
        "value": "ebf-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:56+00:00",
        "timestamp": "1774018916",
        "to_ids": true,
        "type": "domain",
        "uuid": "b99def0a-b09c-40dd-abd1-898a13f2680f",
        "value": "efn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:56+00:00",
        "timestamp": "1774018916",
        "to_ids": true,
        "type": "domain",
        "uuid": "e16a50cc-1c07-4b89-b670-9f6803ddf497",
        "value": "efp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:56+00:00",
        "timestamp": "1774018916",
        "to_ids": true,
        "type": "domain",
        "uuid": "d433fda2-8ca6-47f2-b7a7-60378cc80976",
        "value": "eha-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:56+00:00",
        "timestamp": "1774018917",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e91e710-2776-4896-a5d3-779cac601725",
        "value": "ehf-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:57+00:00",
        "timestamp": "1774018917",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecc732ff-6550-419d-9b78-e19652358740",
        "value": "ehf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:57+00:00",
        "timestamp": "1774018917",
        "to_ids": true,
        "type": "domain",
        "uuid": "fade005b-fb72-4dde-b247-a9814d893dcc",
        "value": "ehi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:57+00:00",
        "timestamp": "1774018917",
        "to_ids": true,
        "type": "domain",
        "uuid": "67a307eb-aaf8-4a99-a445-d1ae64461744",
        "value": "ehj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:57+00:00",
        "timestamp": "1774018917",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed7dc471-6c64-477b-b1e7-73ea965f6ebc",
        "value": "eht-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:57+00:00",
        "timestamp": "1774018917",
        "to_ids": true,
        "type": "domain",
        "uuid": "4265296d-d6d9-4263-8339-147f1e37a944",
        "value": "entry-web-jp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:57+00:00",
        "timestamp": "1774018917",
        "to_ids": true,
        "type": "domain",
        "uuid": "99a53a12-fd19-4517-9932-343994e893f1",
        "value": "eqr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:58+00:00",
        "timestamp": "1774018918",
        "to_ids": true,
        "type": "domain",
        "uuid": "a81e7e4d-bb7c-4580-bec3-4a76ebf2048c",
        "value": "est-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:58+00:00",
        "timestamp": "1774018918",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ae079e4-06e0-4845-a830-25c9c086855d",
        "value": "eu-app-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:58+00:00",
        "timestamp": "1774018918",
        "to_ids": true,
        "type": "domain",
        "uuid": "79cf8fd7-29fa-4738-9ba6-bdb142fb2f36",
        "value": "evw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:58+00:00",
        "timestamp": "1774018918",
        "to_ids": true,
        "type": "domain",
        "uuid": "6502ee37-690f-4425-b225-96dfe204e327",
        "value": "exy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:58+00:00",
        "timestamp": "1774018918",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfd676db-e1fa-4d78-8a5b-045f7e57ec2f",
        "value": "ezb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:58+00:00",
        "timestamp": "1774018918",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b1d5d97-a4f0-47e7-9390-177592d21318",
        "value": "f-app-g-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:58+00:00",
        "timestamp": "1774018919",
        "to_ids": true,
        "type": "domain",
        "uuid": "923754e6-4bca-43e2-9e98-f3e07c0ce251",
        "value": "f-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:59+00:00",
        "timestamp": "1774018919",
        "to_ids": true,
        "type": "domain",
        "uuid": "87f17344-d7b4-41cf-963b-23e3ca345189",
        "value": "f-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:59+00:00",
        "timestamp": "1774018919",
        "to_ids": true,
        "type": "domain",
        "uuid": "2303bf1d-8604-4a8d-807c-9118b95b1dfc",
        "value": "f-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:59+00:00",
        "timestamp": "1774018919",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbc7045f-fd1b-4e33-b2a1-abcfa97e0268",
        "value": "f-wap-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:59+00:00",
        "timestamp": "1774018919",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c7491a3-a7c4-4bcd-a3b1-570989b9a073",
        "value": "faq-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:59+00:00",
        "timestamp": "1774018919",
        "to_ids": true,
        "type": "domain",
        "uuid": "85e5fb38-ed04-4eb4-b8c9-12355891f5ca",
        "value": "fbg-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:59+00:00",
        "timestamp": "1774018919",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9a303b0-0b06-40c0-83a4-255c47d749c7",
        "value": "fbg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:01:59+00:00",
        "timestamp": "1774018920",
        "to_ids": true,
        "type": "domain",
        "uuid": "02acd8b2-eef2-4947-9957-35e32245fec4",
        "value": "fcg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:00+00:00",
        "timestamp": "1774018920",
        "to_ids": true,
        "type": "domain",
        "uuid": "98485872-1bcd-4936-b9c6-d45451b62c6c",
        "value": "fgq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:00+00:00",
        "timestamp": "1774018920",
        "to_ids": true,
        "type": "domain",
        "uuid": "34bd00cf-1f4d-4c7f-b6fb-7455182c9849",
        "value": "fhd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:00+00:00",
        "timestamp": "1774018920",
        "to_ids": true,
        "type": "domain",
        "uuid": "68a11cd0-3c15-41fb-9409-515a000e2f7f",
        "value": "fhp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:00+00:00",
        "timestamp": "1774018920",
        "to_ids": true,
        "type": "domain",
        "uuid": "5acad21e-371b-4924-a501-38a642bd83e4",
        "value": "fig-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:00+00:00",
        "timestamp": "1774018920",
        "to_ids": true,
        "type": "domain",
        "uuid": "20530f38-3be5-4e6c-aec6-50a334e39f3f",
        "value": "fig-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:00+00:00",
        "timestamp": "1774018920",
        "to_ids": true,
        "type": "domain",
        "uuid": "41f81fde-aae8-4962-a09d-576f3f9341f1",
        "value": "fik-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:00+00:00",
        "timestamp": "1774018921",
        "to_ids": true,
        "type": "domain",
        "uuid": "caf7796c-52d9-4fd9-a346-181d14ecdfb7",
        "value": "fik-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:01+00:00",
        "timestamp": "1774018921",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba97456f-39b3-49be-a0ce-1702d9bacdb0",
        "value": "fkd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:01+00:00",
        "timestamp": "1774018921",
        "to_ids": true,
        "type": "domain",
        "uuid": "d63bf1f5-10f4-47d3-8e39-b9a4e8d9d4ac",
        "value": "fkv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:01+00:00",
        "timestamp": "1774018921",
        "to_ids": true,
        "type": "domain",
        "uuid": "6234a76b-8d5a-426a-80f7-ee5c7dffe46a",
        "value": "flow-apps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:01+00:00",
        "timestamp": "1774018921",
        "to_ids": true,
        "type": "domain",
        "uuid": "542f65dc-96e1-4b5c-833d-06a9bb0b3a80",
        "value": "fmp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:01+00:00",
        "timestamp": "1774018921",
        "to_ids": true,
        "type": "domain",
        "uuid": "478517e5-b2ec-4fb1-a2fb-ebf591c0ef97",
        "value": "fnp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:01+00:00",
        "timestamp": "1774018922",
        "to_ids": true,
        "type": "domain",
        "uuid": "218f820a-d0f8-4bfe-83c4-3b32076f6a39",
        "value": "fnr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:02+00:00",
        "timestamp": "1774018922",
        "to_ids": true,
        "type": "domain",
        "uuid": "7321272d-f8e5-4cae-b541-0be2351ac611",
        "value": "fqr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:02+00:00",
        "timestamp": "1774018922",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc786fc4-3fe6-4aee-82d0-ea8585ada596",
        "value": "fqs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:02+00:00",
        "timestamp": "1774018922",
        "to_ids": true,
        "type": "domain",
        "uuid": "13ca1956-36f5-4ac3-808f-08852717cc2c",
        "value": "frame-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:02+00:00",
        "timestamp": "1774018922",
        "to_ids": true,
        "type": "domain",
        "uuid": "68d69eee-0037-4136-8cfc-6e4e3260edae",
        "value": "fst-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:02+00:00",
        "timestamp": "1774018922",
        "to_ids": true,
        "type": "domain",
        "uuid": "049cc616-007c-46da-830b-34937ba76de9",
        "value": "fvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:02+00:00",
        "timestamp": "1774018922",
        "to_ids": true,
        "type": "domain",
        "uuid": "05f7b626-0167-413f-9122-90e2476144b4",
        "value": "fvw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:02+00:00",
        "timestamp": "1774018923",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b80dccb-1ba6-4039-addc-5c92152329a7",
        "value": "fx.set-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:03+00:00",
        "timestamp": "1774018923",
        "to_ids": true,
        "type": "domain",
        "uuid": "2fe014c5-b265-4852-acc7-d2f65bfd174b",
        "value": "fxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:03+00:00",
        "timestamp": "1774018923",
        "to_ids": true,
        "type": "domain",
        "uuid": "144b5932-e454-4cd0-a8c4-926a66c7edef",
        "value": "fyu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:03+00:00",
        "timestamp": "1774018923",
        "to_ids": true,
        "type": "domain",
        "uuid": "af79673e-0e86-4439-b9cb-d5ec85ed9e6d",
        "value": "fyz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:03+00:00",
        "timestamp": "1774018923",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b0f4f4a-6ee6-409b-8588-4f097855a7f7",
        "value": "fzg-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:03+00:00",
        "timestamp": "1774018923",
        "to_ids": true,
        "type": "domain",
        "uuid": "17f6f010-b583-4d72-8d4a-be97022cd62c",
        "value": "fzl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:03+00:00",
        "timestamp": "1774018923",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d3a3545-6e14-4bed-9fce-8293b816bf9a",
        "value": "g-app-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:03+00:00",
        "timestamp": "1774018924",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8cb5dfc-a9b0-468c-be0d-1744e2e0c31e",
        "value": "g-h-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:04+00:00",
        "timestamp": "1774018924",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2f0d111-066c-44bd-8461-c408ee9ea867",
        "value": "g-im-i-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:04+00:00",
        "timestamp": "1774018924",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ba9906a-275e-496b-a5cb-c9d662d34ced",
        "value": "g-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:04+00:00",
        "timestamp": "1774018924",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc584d9c-19c8-41d6-8b56-63216bb51257",
        "value": "g-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:04+00:00",
        "timestamp": "1774018924",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1afc9d9-c612-4d17-848b-ca8165577361",
        "value": "g-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:04+00:00",
        "timestamp": "1774018924",
        "to_ids": true,
        "type": "domain",
        "uuid": "b91ef314-5bf7-4b34-bb3a-09bc211da929",
        "value": "g-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:04+00:00",
        "timestamp": "1774018924",
        "to_ids": true,
        "type": "domain",
        "uuid": "24b79dba-2a6b-4808-b55c-fc82e7a83b06",
        "value": "g-wap-i-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:04+00:00",
        "timestamp": "1774018925",
        "to_ids": true,
        "type": "domain",
        "uuid": "39b50695-bc0b-418f-9417-fcc1a8caef23",
        "value": "g4.bxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:05+00:00",
        "timestamp": "1774018925",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c0c0af6-264e-4f58-a047-61ea1dbe5cb4",
        "value": "g6.dxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:05+00:00",
        "timestamp": "1774018925",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae68e6b1-f1e0-4c01-91e2-b3dba4ed24fe",
        "value": "gaj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:05+00:00",
        "timestamp": "1774018925",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bc6b100-b0db-4785-8251-9a9cbd536aa7",
        "value": "gch-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:05+00:00",
        "timestamp": "1774018925",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd24aa09-3c38-418c-a5da-b205ef81d430",
        "value": "gch-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:05+00:00",
        "timestamp": "1774018925",
        "to_ids": true,
        "type": "domain",
        "uuid": "91aabd48-8209-41ab-862b-bab202119ae1",
        "value": "gdh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:05+00:00",
        "timestamp": "1774018926",
        "to_ids": true,
        "type": "domain",
        "uuid": "712f4d7e-6159-4bcc-b9c2-872ca08efb8c",
        "value": "gdh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:06+00:00",
        "timestamp": "1774018926",
        "to_ids": true,
        "type": "domain",
        "uuid": "5af5dfdb-954b-40f7-a00d-004faa59a93f",
        "value": "gfn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:06+00:00",
        "timestamp": "1774018926",
        "to_ids": true,
        "type": "domain",
        "uuid": "86072986-d13b-453f-805f-65be32ff0a76",
        "value": "gih-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:06+00:00",
        "timestamp": "1774018926",
        "to_ids": true,
        "type": "domain",
        "uuid": "d27742b7-4de4-475c-8784-9d9e31c0f813",
        "value": "gjl-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:06+00:00",
        "timestamp": "1774018926",
        "to_ids": true,
        "type": "domain",
        "uuid": "b86d058e-a42d-4e11-abb0-914f034f30e5",
        "value": "gjl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:06+00:00",
        "timestamp": "1774018926",
        "to_ids": true,
        "type": "domain",
        "uuid": "46483c41-a0b9-499d-abc3-1c3f5d6c6567",
        "value": "gjn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:06+00:00",
        "timestamp": "1774018926",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec0e6c73-6a97-4f0c-93fd-e97d823168a3",
        "value": "gkp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:06+00:00",
        "timestamp": "1774018927",
        "to_ids": true,
        "type": "domain",
        "uuid": "d15cffac-2c68-4c13-b55b-f841beed9ac6",
        "value": "gku-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:07+00:00",
        "timestamp": "1774018927",
        "to_ids": true,
        "type": "domain",
        "uuid": "977feb2c-4614-429a-8758-e18387dc0f15",
        "value": "glm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:07+00:00",
        "timestamp": "1774018927",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4f884c7-a270-4464-9d43-5552ad009c5b",
        "value": "gml-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:07+00:00",
        "timestamp": "1774018927",
        "to_ids": true,
        "type": "domain",
        "uuid": "2304f325-fb74-4933-aafb-02da216bae37",
        "value": "gmp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:07+00:00",
        "timestamp": "1774018927",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cd5a6b4-54ea-4660-992e-5da6d79a8a54",
        "value": "gmx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:07+00:00",
        "timestamp": "1774018927",
        "to_ids": true,
        "type": "domain",
        "uuid": "72cf510f-d44f-4ac1-b205-9fa1daf99222",
        "value": "gnp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:07+00:00",
        "timestamp": "1774018927",
        "to_ids": true,
        "type": "domain",
        "uuid": "71281769-20f2-4f39-ba00-1fd1069b6dfe",
        "value": "gqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:07+00:00",
        "timestamp": "1774018928",
        "to_ids": true,
        "type": "domain",
        "uuid": "78279888-750b-4205-aced-2b393da0789e",
        "value": "gqr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:08+00:00",
        "timestamp": "1774018928",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9956560-2f02-4bee-a4c1-b7865225c800",
        "value": "gqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:08+00:00",
        "timestamp": "1774018928",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf2702d6-2bba-4cbf-b561-c6f83c031b30",
        "value": "grid-apps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:08+00:00",
        "timestamp": "1774018928",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4df5f3b-cf15-4569-aa50-e11b9fbef133",
        "value": "grid-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:08+00:00",
        "timestamp": "1774018928",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e8ebd79-cc68-47d4-9cc9-a60741d4e85f",
        "value": "gst-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:08+00:00",
        "timestamp": "1774018928",
        "to_ids": true,
        "type": "domain",
        "uuid": "b332f540-b98f-45b1-a25e-92ada2e2bb29",
        "value": "gsv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:08+00:00",
        "timestamp": "1774018929",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc74855d-c580-45a6-bd3f-b0f3d6db9596",
        "value": "gsw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:09+00:00",
        "timestamp": "1774018929",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e22b15e-8710-4acc-8fe6-fbb558d7fd9e",
        "value": "gtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:09+00:00",
        "timestamp": "1774018929",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e7b0a3f-0a59-4553-aa87-00470a6f0883",
        "value": "gvl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:09+00:00",
        "timestamp": "1774018929",
        "to_ids": true,
        "type": "domain",
        "uuid": "36f917bb-a259-40d1-ade4-76d6eda69371",
        "value": "gvw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:09+00:00",
        "timestamp": "1774018929",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e7e1629-5655-443f-b7b5-6d385affc815",
        "value": "gwr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:09+00:00",
        "timestamp": "1774018929",
        "to_ids": true,
        "type": "domain",
        "uuid": "94bce823-17f2-4a4b-a8a1-10c35cbc8574",
        "value": "gxh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:09+00:00",
        "timestamp": "1774018929",
        "to_ids": true,
        "type": "domain",
        "uuid": "54a09d81-cd29-48be-8a2f-5976edcd77ed",
        "value": "gxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:09+00:00",
        "timestamp": "1774018930",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ffc54d3-6519-4df0-b80d-46e9dc99ac1a",
        "value": "h-app-i-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:10+00:00",
        "timestamp": "1774018930",
        "to_ids": true,
        "type": "domain",
        "uuid": "a550a2d3-e694-4ffb-bfde-122f58cd1924",
        "value": "h-g-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:10+00:00",
        "timestamp": "1774018930",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4db7e07-c50f-4d9a-b916-a2a39dc419e6",
        "value": "h-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:10+00:00",
        "timestamp": "1774018930",
        "to_ids": true,
        "type": "domain",
        "uuid": "31145bff-01f5-4e53-ba53-92b2f17cebcd",
        "value": "h-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:10+00:00",
        "timestamp": "1774018930",
        "to_ids": true,
        "type": "domain",
        "uuid": "55ddc2db-b5ed-40f8-936c-5bcf69375a78",
        "value": "h-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:10+00:00",
        "timestamp": "1774018930",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd15e43a-0ecf-4905-b293-b7a283d1fa25",
        "value": "h-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:10+00:00",
        "timestamp": "1774018930",
        "to_ids": true,
        "type": "domain",
        "uuid": "42f59393-b8a2-43d0-a42e-d6cafa3d72cb",
        "value": "h-wap-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:11+00:00",
        "timestamp": "1774018931",
        "to_ids": true,
        "type": "domain",
        "uuid": "37a91b14-74a7-410b-83ec-8d8dc01ff74d",
        "value": "h-web-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:11+00:00",
        "timestamp": "1774018931",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e43f110-872a-43b1-a977-e7e4ad535e84",
        "value": "h2.cn-lw-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:11+00:00",
        "timestamp": "1774018931",
        "to_ids": true,
        "type": "domain",
        "uuid": "4dd89e69-f5a0-401b-a04c-1c427bd65a5f",
        "value": "hbk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:11+00:00",
        "timestamp": "1774018931",
        "to_ids": true,
        "type": "domain",
        "uuid": "c327bdaf-629c-4dc8-ba4f-dcebe0fcef1b",
        "value": "hbk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:11+00:00",
        "timestamp": "1774018931",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7041ae1-9ab4-450c-a252-e8cd57434ec2",
        "value": "hdf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:11+00:00",
        "timestamp": "1774018931",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2f6cbfb-7996-49e9-b685-5315ceddcea9",
        "value": "hgv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:11+00:00",
        "timestamp": "1774018932",
        "to_ids": true,
        "type": "domain",
        "uuid": "e73eb018-19e6-4454-8954-cba4b55d7b4b",
        "value": "hid-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:12+00:00",
        "timestamp": "1774018932",
        "to_ids": true,
        "type": "domain",
        "uuid": "41de82cc-bb7f-44d1-9ea7-1ff2d7fd432f",
        "value": "hie-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:12+00:00",
        "timestamp": "1774018932",
        "to_ids": true,
        "type": "domain",
        "uuid": "48b9c2cf-1476-43ea-865f-ea612e7e5f06",
        "value": "hie-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:12+00:00",
        "timestamp": "1774018932",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e96a24a-efc6-43ce-9e4e-c78feba82e39",
        "value": "hk-acrv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:12+00:00",
        "timestamp": "1774018932",
        "to_ids": true,
        "type": "domain",
        "uuid": "16ac71cc-63fc-4b3e-8616-3a24baec0ccc",
        "value": "hk-bkd-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:12+00:00",
        "timestamp": "1774018932",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e329c51-9491-4d72-8802-02222f577fda",
        "value": "hk-bkvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:12+00:00",
        "timestamp": "1774018932",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfcd1bab-2856-41d9-90cc-41afeff22634",
        "value": "hk-bqx-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:12+00:00",
        "timestamp": "1774018933",
        "to_ids": true,
        "type": "domain",
        "uuid": "8afad863-fc90-46b4-a714-d93cb5e06829",
        "value": "hk-bvn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:13+00:00",
        "timestamp": "1774018933",
        "to_ids": true,
        "type": "domain",
        "uuid": "190ad1d3-d7ac-46f0-843b-cb0850696f63",
        "value": "hk-bxpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:13+00:00",
        "timestamp": "1774018933",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f755c6e-02af-4326-a5da-3276da9b151c",
        "value": "hk-cavj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:13+00:00",
        "timestamp": "1774018933",
        "to_ids": true,
        "type": "domain",
        "uuid": "a425a26b-779f-491a-89d0-cb443dc926d6",
        "value": "hk-cmtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:13+00:00",
        "timestamp": "1774018933",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0ce7051-0ea8-4f90-b7dd-42f967cba61c",
        "value": "hk-cmzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:13+00:00",
        "timestamp": "1774018933",
        "to_ids": true,
        "type": "domain",
        "uuid": "60f3303b-7584-44ac-bc70-9f96fac95656",
        "value": "hk-csl-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:13+00:00",
        "timestamp": "1774018933",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b34096d-b40c-4082-9f6e-74b8cec7e2f3",
        "value": "hk-dax-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:13+00:00",
        "timestamp": "1774018934",
        "to_ids": true,
        "type": "domain",
        "uuid": "57a06287-3adc-415f-859f-a75e047f634a",
        "value": "hk-dfzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:14+00:00",
        "timestamp": "1774018934",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d545a08-92b0-4af9-9a0d-a4795ee2e330",
        "value": "hk-dplq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:14+00:00",
        "timestamp": "1774018934",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7d17385-bce1-4846-a8bd-73f47f2e4aa8",
        "value": "hk-drqp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:14+00:00",
        "timestamp": "1774018934",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd5608ba-8d3a-40d4-bdab-2edd651df56c",
        "value": "hk-dxtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:14+00:00",
        "timestamp": "1774018934",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d1de8e3-7c88-4124-8d53-73a6dfa60656",
        "value": "hk-efrq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:14+00:00",
        "timestamp": "1774018934",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cf4e9af-ca90-451b-a6b6-e0c015de0910",
        "value": "hk-enqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:14+00:00",
        "timestamp": "1774018934",
        "to_ids": true,
        "type": "domain",
        "uuid": "cae25e4c-3a34-4b12-918e-7a315bde76f2",
        "value": "hk-fgxp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:15+00:00",
        "timestamp": "1774018935",
        "to_ids": true,
        "type": "domain",
        "uuid": "5027b953-cc2c-49fe-8381-5eff64b8b506",
        "value": "hk-fhkr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:15+00:00",
        "timestamp": "1774018935",
        "to_ids": true,
        "type": "domain",
        "uuid": "82d12557-ab1f-4e94-9da4-3a97bfb727cf",
        "value": "hk-fji-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:15+00:00",
        "timestamp": "1774018935",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcb7b497-4e1c-409b-84c7-4d7373258e12",
        "value": "hk-fnr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:15+00:00",
        "timestamp": "1774018935",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cce4d46-f00c-4130-9065-e5ebb2728814",
        "value": "hk-fqlj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:15+00:00",
        "timestamp": "1774018935",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa2a0c93-05f2-4591-ab7b-c4470a99dfca",
        "value": "hk-fqzx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:15+00:00",
        "timestamp": "1774018935",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bcc1dd6-dece-42ee-b91e-e182c969b446",
        "value": "hk-frkx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:15+00:00",
        "timestamp": "1774018936",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbb22699-4ede-4acf-b8b0-cecf1c1988be",
        "value": "hk-gdp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:16+00:00",
        "timestamp": "1774018936",
        "to_ids": true,
        "type": "domain",
        "uuid": "89cc5a72-6fc5-465c-9ab8-7fb0df953dc8",
        "value": "hk-gjvl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:16+00:00",
        "timestamp": "1774018936",
        "to_ids": true,
        "type": "domain",
        "uuid": "579d2d04-17f9-47ca-b34c-b8549afc9b55",
        "value": "hk-gkh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:16+00:00",
        "timestamp": "1774018936",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffea6fb4-b8d3-4852-816f-7c89e726b82d",
        "value": "hk-gqrb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:16+00:00",
        "timestamp": "1774018936",
        "to_ids": true,
        "type": "domain",
        "uuid": "055be9b2-abf0-45a9-ac63-496611e568a5",
        "value": "hk-gqzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:16+00:00",
        "timestamp": "1774018936",
        "to_ids": true,
        "type": "domain",
        "uuid": "90168706-71a2-45c0-95c5-b8b31f57d3af",
        "value": "hk-gsw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:16+00:00",
        "timestamp": "1774018936",
        "to_ids": true,
        "type": "domain",
        "uuid": "564896d8-35d3-4ea5-8a27-e6d4be186c61",
        "value": "hk-gwmx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:16+00:00",
        "timestamp": "1774018937",
        "to_ids": true,
        "type": "domain",
        "uuid": "b056a533-9d82-4f33-863f-71b02b3dd856",
        "value": "hk-gxmb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:17+00:00",
        "timestamp": "1774018937",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ca7ec59-863f-4adf-bfa0-644300795be2",
        "value": "hk-hrp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:17+00:00",
        "timestamp": "1774018937",
        "to_ids": true,
        "type": "domain",
        "uuid": "502590bc-c633-485b-a358-0a047b0192b2",
        "value": "hk-ikqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:17+00:00",
        "timestamp": "1774018937",
        "to_ids": true,
        "type": "domain",
        "uuid": "10e5adb9-7f44-4b5c-be18-f210ceaba236",
        "value": "hk-ivpk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:17+00:00",
        "timestamp": "1774018937",
        "to_ids": true,
        "type": "domain",
        "uuid": "214148ed-a648-4f53-a23d-d4032dba769d",
        "value": "hk-ivql-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:17+00:00",
        "timestamp": "1774018937",
        "to_ids": true,
        "type": "domain",
        "uuid": "942ae376-2152-48f3-b529-4645ce99c8d8",
        "value": "hk-ivtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:17+00:00",
        "timestamp": "1774018937",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d33ddca-dfd1-48a6-a91a-36c613d83f99",
        "value": "hk-jka-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:18+00:00",
        "timestamp": "1774018938",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b3f40cc-361e-4fdb-a35c-95e21ec59fc4",
        "value": "hk-jmtx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:18+00:00",
        "timestamp": "1774018938",
        "to_ids": true,
        "type": "domain",
        "uuid": "62a47011-130a-421e-ab37-52e13a0c1f50",
        "value": "hk-jow-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:18+00:00",
        "timestamp": "1774018938",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c13c2ba-a426-47dc-bd4f-208534ed6c42",
        "value": "hk-jxbq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:18+00:00",
        "timestamp": "1774018938",
        "to_ids": true,
        "type": "domain",
        "uuid": "c61e0ad4-4a38-4a19-8f05-7ae781e26466",
        "value": "hk-jxrb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:18+00:00",
        "timestamp": "1774018938",
        "to_ids": true,
        "type": "domain",
        "uuid": "a463381a-ba24-4a1f-bf01-9f5ad8cfee30",
        "value": "hk-kdfp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:18+00:00",
        "timestamp": "1774018938",
        "to_ids": true,
        "type": "domain",
        "uuid": "14864d77-c81e-4e1a-8005-35e469857546",
        "value": "hk-kplv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:18+00:00",
        "timestamp": "1774018939",
        "to_ids": true,
        "type": "domain",
        "uuid": "b51d0ce5-9156-44b2-80b6-510cdd9a56e0",
        "value": "hk-kqdw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:19+00:00",
        "timestamp": "1774018939",
        "to_ids": true,
        "type": "domain",
        "uuid": "bab53800-ef66-4b17-99d1-91cb7d0e44a7",
        "value": "hk-kzbx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:19+00:00",
        "timestamp": "1774018939",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d3b850c-f5c8-4733-864c-944c4202ea85",
        "value": "hk-lcz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:19+00:00",
        "timestamp": "1774018939",
        "to_ids": true,
        "type": "domain",
        "uuid": "b69bb988-4cd2-43aa-bd84-dd7e617529c0",
        "value": "hk-lgp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:19+00:00",
        "timestamp": "1774018939",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f4bbef9-0f49-4378-a8d1-d36f2c9ad6fb",
        "value": "hk-lmqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:19+00:00",
        "timestamp": "1774018939",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a571ecf-a09a-4555-8599-6acb110ce405",
        "value": "hk-lpxd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:19+00:00",
        "timestamp": "1774018939",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d22b729-d9e3-4905-bbec-79c5005384f2",
        "value": "hk-lvrq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:19+00:00",
        "timestamp": "1774018940",
        "to_ids": true,
        "type": "domain",
        "uuid": "93b08acf-d54c-43b0-960f-c85c0c33dc53",
        "value": "hk-lza-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:20+00:00",
        "timestamp": "1774018940",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2b255d1-ed38-4592-86e2-239a369e2c8b",
        "value": "hk-mfd-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:20+00:00",
        "timestamp": "1774018940",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cc9c13b-5880-4759-bf46-4821aa6bd50e",
        "value": "hk-mhs-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:20+00:00",
        "timestamp": "1774018940",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3fc653c-1c5c-4fd9-9a62-1ebe1f895be6",
        "value": "hk-mrdx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:20+00:00",
        "timestamp": "1774018940",
        "to_ids": true,
        "type": "domain",
        "uuid": "97d223b3-1496-4a40-a939-30848dbd0f76",
        "value": "hk-mvrf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:20+00:00",
        "timestamp": "1774018940",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c8f79b0-5b9b-4442-bc59-4f34bc3f4a13",
        "value": "hk-net-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:20+00:00",
        "timestamp": "1774018940",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd480a3b-561b-4126-aab1-0ce2f1bda8f2",
        "value": "hk-npvw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:20+00:00",
        "timestamp": "1774018941",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b8292d6-0ca7-4630-8d63-f12a4f94ed6a",
        "value": "hk-nqkr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:21+00:00",
        "timestamp": "1774018941",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e20d00c-2305-4e2b-a070-e099e955901f",
        "value": "hk-nqky-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:21+00:00",
        "timestamp": "1774018941",
        "to_ids": true,
        "type": "domain",
        "uuid": "38028899-6c54-4844-8e64-e9214078bf57",
        "value": "hk-nue-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:21+00:00",
        "timestamp": "1774018941",
        "to_ids": true,
        "type": "domain",
        "uuid": "6019371d-7f09-4d39-adcd-33a815349dce",
        "value": "hk-nuh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:21+00:00",
        "timestamp": "1774018941",
        "to_ids": true,
        "type": "domain",
        "uuid": "45dbd48b-2eef-4814-bd48-b8165b01df5d",
        "value": "hk-oaq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:21+00:00",
        "timestamp": "1774018941",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4746605-8e6d-4c39-9799-48eadfdaad1a",
        "value": "hk-opdf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:21+00:00",
        "timestamp": "1774018942",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f9c087e-7e31-4859-b84a-1916e22ed092",
        "value": "hk-opzl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:22+00:00",
        "timestamp": "1774018942",
        "to_ids": true,
        "type": "domain",
        "uuid": "8aba27fb-fea2-4aa5-bd7b-f9deab520cd1",
        "value": "hk-oqkm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:22+00:00",
        "timestamp": "1774018942",
        "to_ids": true,
        "type": "domain",
        "uuid": "15421aa7-4d9b-4724-af27-ce2da1732a0f",
        "value": "hk-oqtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:22+00:00",
        "timestamp": "1774018942",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2cf0200-97ce-4b4b-86e5-4d80f61a0d04",
        "value": "hk-otkv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:22+00:00",
        "timestamp": "1774018942",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae8c464e-2dde-40d2-82ef-4c546919c050",
        "value": "hk-oxf-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:22+00:00",
        "timestamp": "1774018942",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a2c0115-8933-4497-b93b-2c5092d29ab8",
        "value": "hk-prvq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:22+00:00",
        "timestamp": "1774018943",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad97b183-db02-408d-a6bb-203c5076b699",
        "value": "hk-prwz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:23+00:00",
        "timestamp": "1774018943",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fed2cf9-9b86-43b3-aa43-8dc432200fbd",
        "value": "hk-prxm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:23+00:00",
        "timestamp": "1774018943",
        "to_ids": true,
        "type": "domain",
        "uuid": "17ac5206-497d-4fdf-a5cd-62281901beab",
        "value": "hk-pwts-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:23+00:00",
        "timestamp": "1774018943",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f1a8eb4-4101-429a-81be-f833a6a47425",
        "value": "hk-pxrw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:23+00:00",
        "timestamp": "1774018943",
        "to_ids": true,
        "type": "domain",
        "uuid": "265b64eb-aa6d-4006-9f18-c2b578fae0c9",
        "value": "hk-qklv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:23+00:00",
        "timestamp": "1774018943",
        "to_ids": true,
        "type": "domain",
        "uuid": "281a9f2d-695d-43fa-9d7c-4fd066c512af",
        "value": "hk-qrhx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:23+00:00",
        "timestamp": "1774018943",
        "to_ids": true,
        "type": "domain",
        "uuid": "524dc25d-84b1-4036-a0f6-a15036032d58",
        "value": "hk-qthw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:23+00:00",
        "timestamp": "1774018944",
        "to_ids": true,
        "type": "domain",
        "uuid": "291407da-8bd8-4046-b4c9-bc414d6a503f",
        "value": "hk-qxbl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:24+00:00",
        "timestamp": "1774018944",
        "to_ids": true,
        "type": "domain",
        "uuid": "a14da2ad-1676-4681-8983-1259e2c03945",
        "value": "hk-rkvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:24+00:00",
        "timestamp": "1774018944",
        "to_ids": true,
        "type": "domain",
        "uuid": "138172d0-804b-4713-8bad-c3e69ddd9d62",
        "value": "hk-rpt-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:24+00:00",
        "timestamp": "1774018944",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbb44c8f-da9a-40ef-8899-659cf4903c9e",
        "value": "hk-rtmx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:24+00:00",
        "timestamp": "1774018944",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c8b757a-cbae-40a5-972e-74a7a2244946",
        "value": "hk-rtxb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:24+00:00",
        "timestamp": "1774018944",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1134a01-1ca9-4e76-b378-4257fc0656de",
        "value": "hk-rvlc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:24+00:00",
        "timestamp": "1774018945",
        "to_ids": true,
        "type": "domain",
        "uuid": "1df730c4-d7d2-46a5-8349-9a66f2d551ab",
        "value": "hk-rxbm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:25+00:00",
        "timestamp": "1774018945",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba9fb5a9-670c-4da3-8251-88db9d57a3ec",
        "value": "hk-sbgx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:25+00:00",
        "timestamp": "1774018945",
        "to_ids": true,
        "type": "domain",
        "uuid": "42e52f77-f371-4a9d-8f76-ccd2e26362ad",
        "value": "hk-smh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:25+00:00",
        "timestamp": "1774018945",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cfca982-4b1d-446c-8acc-d57d378ae300",
        "value": "hk-sxtn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:25+00:00",
        "timestamp": "1774018945",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ec3002b-8bcd-45e4-93c2-dbf1ebb912a6",
        "value": "hk-sztp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:25+00:00",
        "timestamp": "1774018945",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecc6de86-9e0f-43c5-a995-f220bba395b8",
        "value": "hk-tdz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:25+00:00",
        "timestamp": "1774018945",
        "to_ids": true,
        "type": "domain",
        "uuid": "4375aba0-7e4d-4870-a1cc-33823448d778",
        "value": "hk-tjq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:25+00:00",
        "timestamp": "1774018946",
        "to_ids": true,
        "type": "domain",
        "uuid": "708a817c-9c52-4e02-a825-3077e1d081b9",
        "value": "hk-tkqm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:26+00:00",
        "timestamp": "1774018946",
        "to_ids": true,
        "type": "domain",
        "uuid": "99f6c96b-592e-46cf-b01e-f92cec13c04f",
        "value": "hk-tpz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:26+00:00",
        "timestamp": "1774018946",
        "to_ids": true,
        "type": "domain",
        "uuid": "031cab84-8e1d-40a0-b9bd-983dc4ac8103",
        "value": "hk-tvrx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:26+00:00",
        "timestamp": "1774018946",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbd190bc-5847-4b30-a817-4ae60258d593",
        "value": "hk-twqk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:26+00:00",
        "timestamp": "1774018946",
        "to_ids": true,
        "type": "domain",
        "uuid": "9571ae28-6ef4-4a61-b0a3-f8e4c226292d",
        "value": "hk-uro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:26+00:00",
        "timestamp": "1774018946",
        "to_ids": true,
        "type": "domain",
        "uuid": "06fc7cbf-2330-4328-bf61-1690e0a2f888",
        "value": "hk-uvmq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:26+00:00",
        "timestamp": "1774018946",
        "to_ids": true,
        "type": "domain",
        "uuid": "83931886-ae9f-4df8-9c68-7a40bfe91545",
        "value": "hk-vce-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:27+00:00",
        "timestamp": "1774018947",
        "to_ids": true,
        "type": "domain",
        "uuid": "be77fd4b-e903-4c9b-a82d-01aa712d4896",
        "value": "hk-vgrl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:27+00:00",
        "timestamp": "1774018947",
        "to_ids": true,
        "type": "domain",
        "uuid": "11759c50-5dec-4c32-bc2f-9f3339f66ff1",
        "value": "hk-vktr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:27+00:00",
        "timestamp": "1774018947",
        "to_ids": true,
        "type": "domain",
        "uuid": "380d5606-4628-43c5-8edc-d72aa9520ea2",
        "value": "hk-vlbq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:27+00:00",
        "timestamp": "1774018947",
        "to_ids": true,
        "type": "domain",
        "uuid": "201c56bd-9334-49f3-83b6-4f98f5e298d0",
        "value": "hk-vpi-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:27+00:00",
        "timestamp": "1774018947",
        "to_ids": true,
        "type": "domain",
        "uuid": "76ec4fa2-5141-4211-8761-cd67e6bd0cad",
        "value": "hk-vub-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:27+00:00",
        "timestamp": "1774018947",
        "to_ids": true,
        "type": "domain",
        "uuid": "2fef782e-cc2a-4924-bee2-9f57dc38b5a2",
        "value": "hk-vwy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:27+00:00",
        "timestamp": "1774018948",
        "to_ids": true,
        "type": "domain",
        "uuid": "031589f4-861b-4827-8df5-65b987dba1a8",
        "value": "hk-vxfb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:28+00:00",
        "timestamp": "1774018948",
        "to_ids": true,
        "type": "domain",
        "uuid": "f52e2533-d285-4872-8838-97bf741e2d87",
        "value": "hk-vyu-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:28+00:00",
        "timestamp": "1774018948",
        "to_ids": true,
        "type": "domain",
        "uuid": "7793948e-83c5-4990-a745-099dd293a43d",
        "value": "hk-web-net-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:28+00:00",
        "timestamp": "1774018948",
        "to_ids": true,
        "type": "domain",
        "uuid": "59bc4e8c-db09-4766-becd-04442a716d04",
        "value": "hk-wkh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:28+00:00",
        "timestamp": "1774018948",
        "to_ids": true,
        "type": "domain",
        "uuid": "75af518f-605b-435c-972d-bd5411416bbe",
        "value": "hk-wqbm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:28+00:00",
        "timestamp": "1774018948",
        "to_ids": true,
        "type": "domain",
        "uuid": "61b65833-0f45-43c1-8ba8-11cf626fd23a",
        "value": "hk-wqnr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:28+00:00",
        "timestamp": "1774018948",
        "to_ids": true,
        "type": "domain",
        "uuid": "08bb9d6a-2819-4978-8d23-a7e095675b94",
        "value": "hk-wqpm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:28+00:00",
        "timestamp": "1774018949",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cfb5e34-1829-46a0-ae20-19d792f640f0",
        "value": "hk-wrpb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:29+00:00",
        "timestamp": "1774018949",
        "to_ids": true,
        "type": "domain",
        "uuid": "04695a2b-e65a-4581-a7b3-7457a4daf9d7",
        "value": "hk-wto-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:29+00:00",
        "timestamp": "1774018949",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9cd1c95-14c2-45ec-9e3a-7c7fb2e6a48a",
        "value": "hk-xra-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:29+00:00",
        "timestamp": "1774018949",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c4ee4ea-ccd4-4fd0-92f0-bc547bd1a3ff",
        "value": "hk-yqpm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:29+00:00",
        "timestamp": "1774018949",
        "to_ids": true,
        "type": "domain",
        "uuid": "799ec0df-6e38-49d5-b76f-88d662fcfed3",
        "value": "hk-yqtd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:29+00:00",
        "timestamp": "1774018949",
        "to_ids": true,
        "type": "domain",
        "uuid": "48659282-52cd-4e78-ac98-e9f1e8434fda",
        "value": "hk-zbht-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:29+00:00",
        "timestamp": "1774018949",
        "to_ids": true,
        "type": "domain",
        "uuid": "27b9387f-4707-4b90-a4a9-d68e35908ffc",
        "value": "hk-zcr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:29+00:00",
        "timestamp": "1774018950",
        "to_ids": true,
        "type": "domain",
        "uuid": "46d4c1f0-110a-456f-9a44-0706ef814fba",
        "value": "hk-zgi-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:30+00:00",
        "timestamp": "1774018950",
        "to_ids": true,
        "type": "domain",
        "uuid": "ceeedca9-1d90-4e50-adcd-975d989158d2",
        "value": "hk-zmbp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:30+00:00",
        "timestamp": "1774018950",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae887aeb-519f-4d4c-921a-c2378e844918",
        "value": "hk-zmtj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:30+00:00",
        "timestamp": "1774018950",
        "to_ids": true,
        "type": "domain",
        "uuid": "06c787fd-20af-425f-ab7a-c42054867611",
        "value": "hk-zqn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:30+00:00",
        "timestamp": "1774018950",
        "to_ids": true,
        "type": "domain",
        "uuid": "e282acd4-1ebb-4a92-b309-ff84c7ebf111",
        "value": "hk-zvc-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:30+00:00",
        "timestamp": "1774018950",
        "to_ids": true,
        "type": "domain",
        "uuid": "c27e9bf9-f06e-4ec7-b0bb-7ace3008dcca",
        "value": "hkm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:30+00:00",
        "timestamp": "1774018950",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7487758-9d7b-448e-9946-d5db3a8e2aba",
        "value": "hkm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:31+00:00",
        "timestamp": "1774018951",
        "to_ids": true,
        "type": "domain",
        "uuid": "56c04713-b3a8-4f1a-93ff-46cf9b2407d8",
        "value": "hkr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:31+00:00",
        "timestamp": "1774018951",
        "to_ids": true,
        "type": "domain",
        "uuid": "63d1348e-c5f9-486a-836d-3bff92facf29",
        "value": "hlm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:31+00:00",
        "timestamp": "1774018951",
        "to_ids": true,
        "type": "domain",
        "uuid": "8487abbf-c1a5-46ec-8252-51b6eea8bafd",
        "value": "hls-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:31+00:00",
        "timestamp": "1774018951",
        "to_ids": true,
        "type": "domain",
        "uuid": "22f6a9ad-28d8-4621-8f96-4fb39196af54",
        "value": "hnp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:31+00:00",
        "timestamp": "1774018951",
        "to_ids": true,
        "type": "domain",
        "uuid": "390af972-784e-478b-9ef8-ff857806b710",
        "value": "horizon-app-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:31+00:00",
        "timestamp": "1774018951",
        "to_ids": true,
        "type": "domain",
        "uuid": "9116ae20-ec68-40d2-bc85-7898bfdb74bd",
        "value": "hpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:31+00:00",
        "timestamp": "1774018952",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fe520db-457d-4fe4-a58d-5e03af7bc586",
        "value": "hqd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:32+00:00",
        "timestamp": "1774018952",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6d8fabb-357f-4ecc-b8d4-2f7c7eaf0309",
        "value": "hqs-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:32+00:00",
        "timestamp": "1774018952",
        "to_ids": true,
        "type": "domain",
        "uuid": "96afed79-dfdd-4ca4-a8aa-a2496102050e",
        "value": "hqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:32+00:00",
        "timestamp": "1774018952",
        "to_ids": true,
        "type": "domain",
        "uuid": "085c82f7-69f7-4b54-8e1e-cb2fc3b0bc8a",
        "value": "hrp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:32+00:00",
        "timestamp": "1774018952",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a974f9b-59f0-4ae5-91d1-be5ca6bb40ed",
        "value": "hsl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:32+00:00",
        "timestamp": "1774018952",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d73237d-ee8c-4d8a-92e7-f62fcceb2892",
        "value": "hst-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:32+00:00",
        "timestamp": "1774018952",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8e38883-679d-4e60-a69a-4b7e7de828df",
        "value": "hub-us-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:33+00:00",
        "timestamp": "1774018953",
        "to_ids": true,
        "type": "domain",
        "uuid": "22676213-905e-42a8-8abf-85cdd77c4f9e",
        "value": "hubapp-cn-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:33+00:00",
        "timestamp": "1774018953",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0b1c012-927e-4e0f-a516-b0f8e7587f64",
        "value": "hubchat-net-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:33+00:00",
        "timestamp": "1774018953",
        "to_ids": true,
        "type": "domain",
        "uuid": "a517e34c-98d7-409e-9372-4faf4462e16c",
        "value": "hubweb-net-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:33+00:00",
        "timestamp": "1774018953",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbed4839-438f-41e7-aeb2-9f5f416fd88e",
        "value": "hvw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:33+00:00",
        "timestamp": "1774018953",
        "to_ids": true,
        "type": "domain",
        "uuid": "54ef0cb6-1661-40ed-9f7a-ce981a0ab10a",
        "value": "hwc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:33+00:00",
        "timestamp": "1774018953",
        "to_ids": true,
        "type": "domain",
        "uuid": "abb6454e-75a1-4f49-a56e-7ee5f1d1b363",
        "value": "hwn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:33+00:00",
        "timestamp": "1774018954",
        "to_ids": true,
        "type": "domain",
        "uuid": "a73c1700-a57d-4cd5-b8ec-3b4f3b49e9e8",
        "value": "hwt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:34+00:00",
        "timestamp": "1774018954",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0db1116-4427-42da-923a-07ba6fe618d5",
        "value": "hxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:34+00:00",
        "timestamp": "1774018954",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e53d107-82ec-4a5e-89f6-e75a8aff586b",
        "value": "hzb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:34+00:00",
        "timestamp": "1774018954",
        "to_ids": true,
        "type": "domain",
        "uuid": "a209d392-9098-4d9c-b0fc-01eca4a11d99",
        "value": "i-app-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:34+00:00",
        "timestamp": "1774018954",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a72773a-d185-4b69-9f55-8534abc1efe3",
        "value": "i-app-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:34+00:00",
        "timestamp": "1774018954",
        "to_ids": true,
        "type": "domain",
        "uuid": "73abfc8e-5e4b-40f9-bf9a-cffabab2a8f5",
        "value": "i-j-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:34+00:00",
        "timestamp": "1774018954",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6e65aec-06f7-4604-a068-056dd8e60dd6",
        "value": "i-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:34+00:00",
        "timestamp": "1774018955",
        "to_ids": true,
        "type": "domain",
        "uuid": "73e0c5eb-f4e5-4cba-abf2-f6e37786f282",
        "value": "i-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:35+00:00",
        "timestamp": "1774018955",
        "to_ids": true,
        "type": "domain",
        "uuid": "517b331e-ac06-4313-8ad0-20fcec19e4de",
        "value": "i-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:35+00:00",
        "timestamp": "1774018955",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a07307b-e13a-4813-8db2-e7e1eb578ca5",
        "value": "i-wap-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:35+00:00",
        "timestamp": "1774018955",
        "to_ids": true,
        "type": "domain",
        "uuid": "63205d76-54ef-4c7b-abd7-52998420ff6b",
        "value": "i-web-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:35+00:00",
        "timestamp": "1774018955",
        "to_ids": true,
        "type": "domain",
        "uuid": "63edbd95-d0e4-4eec-8087-67f6fe66afa7",
        "value": "icl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:35+00:00",
        "timestamp": "1774018955",
        "to_ids": true,
        "type": "domain",
        "uuid": "090c3b82-eabf-4917-a981-c15b4febd8b0",
        "value": "iej-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:35+00:00",
        "timestamp": "1774018955",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e205dab-150e-48ff-bb9a-8d275a0d71c4",
        "value": "iej-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:35+00:00",
        "timestamp": "1774018956",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ba4d87f-03c7-4820-8c28-ab44a6065f8b",
        "value": "ijf-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:36+00:00",
        "timestamp": "1774018956",
        "to_ids": true,
        "type": "domain",
        "uuid": "43ed64c9-3f2f-400f-9248-584f87c97055",
        "value": "ijf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:36+00:00",
        "timestamp": "1774018956",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4b9dc62-3795-4e55-9a6d-9f9b7d0f5eb6",
        "value": "ijkl.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:36+00:00",
        "timestamp": "1774018956",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ee772b3-e83e-4fa4-836d-bfc9cc717031",
        "value": "ilm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:36+00:00",
        "timestamp": "1774018956",
        "to_ids": true,
        "type": "domain",
        "uuid": "439009da-2c71-4255-9330-65ca65b183bf",
        "value": "iln-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:36+00:00",
        "timestamp": "1774018956",
        "to_ids": true,
        "type": "domain",
        "uuid": "452b0816-8ff0-4222-9e28-02c77b40e9ca",
        "value": "iln-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:36+00:00",
        "timestamp": "1774018957",
        "to_ids": true,
        "type": "domain",
        "uuid": "a127de8f-3f90-4ac5-8ce9-4c8ecb68b848",
        "value": "im-app-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:37+00:00",
        "timestamp": "1774018957",
        "to_ids": true,
        "type": "domain",
        "uuid": "616e5b0f-9f77-44b3-8ef7-d61b099ae5de",
        "value": "im-link-pro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:37+00:00",
        "timestamp": "1774018957",
        "to_ids": true,
        "type": "domain",
        "uuid": "a844fbdd-6def-48a3-b9be-2d7d8f7f35e6",
        "value": "im-online-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:37+00:00",
        "timestamp": "1774018957",
        "to_ids": true,
        "type": "domain",
        "uuid": "00398848-8a18-4532-a662-f2e6dcc902ee",
        "value": "im-web-link-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:37+00:00",
        "timestamp": "1774018957",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c1efebe-81ae-4f5d-bf4c-fd897ff03efd",
        "value": "imchat-net-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:37+00:00",
        "timestamp": "1774018957",
        "to_ids": true,
        "type": "domain",
        "uuid": "a41f5f4c-8623-476d-984c-5fd99d008cfa",
        "value": "imsite-pro-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:37+00:00",
        "timestamp": "1774018957",
        "to_ids": true,
        "type": "domain",
        "uuid": "e70850cd-16f3-4a5f-8088-8f0fdb4f7e7b",
        "value": "imweb-cn-live-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:37+00:00",
        "timestamp": "1774018958",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbf56aec-83fb-4e99-8eff-bc8322aedcf1",
        "value": "imweb-live-net-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:38+00:00",
        "timestamp": "1774018958",
        "to_ids": true,
        "type": "domain",
        "uuid": "a45b2012-455e-4be4-8a4c-c4673f16c10a",
        "value": "info-web-us-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:38+00:00",
        "timestamp": "1774018958",
        "to_ids": true,
        "type": "domain",
        "uuid": "5967618a-1a17-4a8c-a742-a939588dda20",
        "value": "inp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:38+00:00",
        "timestamp": "1774018958",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1f87a66-474a-4ac5-b8e3-0c29f1cdf34b",
        "value": "instant-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:38+00:00",
        "timestamp": "1774018958",
        "to_ids": true,
        "type": "domain",
        "uuid": "c79c62ed-f587-420f-ab85-21f51adfa0fe",
        "value": "ipb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:38+00:00",
        "timestamp": "1774018958",
        "to_ids": true,
        "type": "domain",
        "uuid": "f77b29d7-624a-435f-b54e-06085fd73aa8",
        "value": "itx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:38+00:00",
        "timestamp": "1774018958",
        "to_ids": true,
        "type": "domain",
        "uuid": "a336378e-21c7-4fc3-9397-de7cc868ea6e",
        "value": "ivb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:38+00:00",
        "timestamp": "1774018959",
        "to_ids": true,
        "type": "domain",
        "uuid": "2acec213-e883-41d3-8c0e-2836b96b0b94",
        "value": "ivd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:39+00:00",
        "timestamp": "1774018959",
        "to_ids": true,
        "type": "domain",
        "uuid": "84fa8ba1-9a86-4195-a242-51e4080b11ed",
        "value": "ivn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:39+00:00",
        "timestamp": "1774018959",
        "to_ids": true,
        "type": "domain",
        "uuid": "48cc553b-53d5-461c-b450-73c10de85757",
        "value": "iwr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:39+00:00",
        "timestamp": "1774018959",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae5605e2-7cd7-4be2-94fc-7323a309dbae",
        "value": "ixy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:39+00:00",
        "timestamp": "1774018959",
        "to_ids": true,
        "type": "domain",
        "uuid": "636d06c3-b946-4aeb-bb17-f1b41b9c7370",
        "value": "j-app-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:39+00:00",
        "timestamp": "1774018959",
        "to_ids": true,
        "type": "domain",
        "uuid": "47e42113-9bbc-4c20-9222-251863f110da",
        "value": "j-i-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:40+00:00",
        "timestamp": "1774018960",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6388847-2d34-4588-8ed8-5ef8b53ebc2e",
        "value": "j-im-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:40+00:00",
        "timestamp": "1774018960",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f931823-78c8-42bf-bdd3-27ae769bedfd",
        "value": "j-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:40+00:00",
        "timestamp": "1774018960",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ed3a915-a6e0-4256-add3-a2f55900a1a4",
        "value": "j-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:40+00:00",
        "timestamp": "1774018960",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ea8c9be-5bd3-4505-963e-3a04c31a30f8",
        "value": "j-u-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:40+00:00",
        "timestamp": "1774018960",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c7508df-ab14-4f85-90d9-95bf3864dad0",
        "value": "j-wap-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:40+00:00",
        "timestamp": "1774018960",
        "to_ids": true,
        "type": "domain",
        "uuid": "bddd1a99-d4ca-41cc-ad0c-8476e6f3f10d",
        "value": "j-web-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:40+00:00",
        "timestamp": "1774018961",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e5cbb73-1c92-4cb0-9701-412616edcea1",
        "value": "jbn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:41+00:00",
        "timestamp": "1774018961",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a09eeed-9cd5-4755-b749-9960474b0685",
        "value": "jdm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:41+00:00",
        "timestamp": "1774018961",
        "to_ids": true,
        "type": "domain",
        "uuid": "606890ce-75fd-4a45-920f-f585e544d009",
        "value": "jdu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:41+00:00",
        "timestamp": "1774018961",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8c77d58-c382-469a-afa7-bd5e9cf10742",
        "value": "jfk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:41+00:00",
        "timestamp": "1774018961",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d19318b-51b1-4899-b316-d3902c1107c2",
        "value": "jhz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:41+00:00",
        "timestamp": "1774018961",
        "to_ids": true,
        "type": "domain",
        "uuid": "72f54431-fd57-426b-a5c4-3693cae8b967",
        "value": "jkg-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:41+00:00",
        "timestamp": "1774018961",
        "to_ids": true,
        "type": "domain",
        "uuid": "af7a54d4-1d39-48fe-87e5-66ca12217038",
        "value": "jkg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:41+00:00",
        "timestamp": "1774018962",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca2ccfce-298a-4890-b183-d74a04a52e47",
        "value": "jls-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:42+00:00",
        "timestamp": "1774018962",
        "to_ids": true,
        "type": "domain",
        "uuid": "00d29ff8-cff3-44b2-a652-09820ef5aea3",
        "value": "jmo-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:42+00:00",
        "timestamp": "1774018962",
        "to_ids": true,
        "type": "domain",
        "uuid": "0095bdec-da0d-4d62-b88e-e27b8a9b78dd",
        "value": "jmo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:42+00:00",
        "timestamp": "1774018962",
        "to_ids": true,
        "type": "domain",
        "uuid": "962b9739-762d-48d8-89bd-74a0b3e5a41e",
        "value": "jmw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:42+00:00",
        "timestamp": "1774018962",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fe8185e-b5e1-433b-990d-85216323fadf",
        "value": "jnp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:42+00:00",
        "timestamp": "1774018962",
        "to_ids": true,
        "type": "domain",
        "uuid": "758404e9-5c95-4124-9cf0-582a3f80c269",
        "value": "jnp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:42+00:00",
        "timestamp": "1774018962",
        "to_ids": true,
        "type": "domain",
        "uuid": "a673bf0b-4252-499b-a51e-87529e1773b6",
        "value": "jow-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:43+00:00",
        "timestamp": "1774018963",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bf96a8d-8655-4829-ac04-0cf22ef64b5b",
        "value": "jp-sec-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:43+00:00",
        "timestamp": "1774018963",
        "to_ids": true,
        "type": "domain",
        "uuid": "a752115c-2d24-4ef8-9554-95e9d0639249",
        "value": "jp-web-sec-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:43+00:00",
        "timestamp": "1774018963",
        "to_ids": true,
        "type": "domain",
        "uuid": "f84ecc73-14a6-4bd3-b53b-7abda6be01a6",
        "value": "jpc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:43+00:00",
        "timestamp": "1774018963",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bbf71bb-1129-4ee8-80ec-f5c0af15ad40",
        "value": "jqd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:43+00:00",
        "timestamp": "1774018963",
        "to_ids": true,
        "type": "domain",
        "uuid": "7542de0b-5e52-46a4-b25c-3f72bb2f1311",
        "value": "jrn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:43+00:00",
        "timestamp": "1774018963",
        "to_ids": true,
        "type": "domain",
        "uuid": "335134bc-515d-467c-a96e-0a9dd892c139",
        "value": "jtb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:43+00:00",
        "timestamp": "1774018964",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b223ec7-77c5-4b12-8492-16945c223127",
        "value": "jtn-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:44+00:00",
        "timestamp": "1774018964",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a7d75ad-d538-45a6-8c0f-d07bccf471a2",
        "value": "jts-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:44+00:00",
        "timestamp": "1774018964",
        "to_ids": true,
        "type": "domain",
        "uuid": "411f80d2-bac4-49b0-8d5a-15f495d97653",
        "value": "jux-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:44+00:00",
        "timestamp": "1774018964",
        "to_ids": true,
        "type": "domain",
        "uuid": "30af1362-37dc-4979-9c72-6199a9e3e4cd",
        "value": "jvt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:44+00:00",
        "timestamp": "1774018964",
        "to_ids": true,
        "type": "domain",
        "uuid": "75c0e7d8-4246-4521-bd9b-46b4e908b1fb",
        "value": "jwl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:44+00:00",
        "timestamp": "1774018964",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f8e8de5-21a8-4c4d-908b-04bc6f4496cb",
        "value": "jwr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:44+00:00",
        "timestamp": "1774018964",
        "to_ids": true,
        "type": "domain",
        "uuid": "591883d0-a800-4c6e-8a50-612c31c3a706",
        "value": "jxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:44+00:00",
        "timestamp": "1774018965",
        "to_ids": true,
        "type": "domain",
        "uuid": "299f84b0-c78f-46a0-88e1-09b9b552f401",
        "value": "k-app-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:45+00:00",
        "timestamp": "1774018965",
        "to_ids": true,
        "type": "domain",
        "uuid": "938eb0eb-14e4-4ea1-8af8-d61a9c6ae332",
        "value": "k-l-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:45+00:00",
        "timestamp": "1774018965",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b700fce-89d2-49e5-a23a-d8a9dbcbd0a1",
        "value": "k-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:45+00:00",
        "timestamp": "1774018965",
        "to_ids": true,
        "type": "domain",
        "uuid": "221e123f-5cd0-4227-b3b6-edc3aee1ed7d",
        "value": "k-wap-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:45+00:00",
        "timestamp": "1774018965",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c555496-653c-4891-bd98-a1d21cd44d4f",
        "value": "k-web-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:45+00:00",
        "timestamp": "1774018965",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fb4c6b0-386d-4d8a-b88d-18ea2c15f471",
        "value": "kcz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:45+00:00",
        "timestamp": "1774018966",
        "to_ids": true,
        "type": "domain",
        "uuid": "600211f3-a311-4f26-ac03-4118440d4ef3",
        "value": "kdr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:46+00:00",
        "timestamp": "1774018966",
        "to_ids": true,
        "type": "domain",
        "uuid": "64004fc1-2a1b-42c5-99e5-6484b75844fb",
        "value": "kdu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:46+00:00",
        "timestamp": "1774018966",
        "to_ids": true,
        "type": "domain",
        "uuid": "160f4005-9a08-4f41-88ad-23f2a13dbc64",
        "value": "ken-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:46+00:00",
        "timestamp": "1774018966",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c0f693c-dfb1-4ea0-952f-e57af809e410",
        "value": "klh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:46+00:00",
        "timestamp": "1774018966",
        "to_ids": true,
        "type": "domain",
        "uuid": "56ed40d6-b784-42c1-a141-0417444ede80",
        "value": "klh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:46+00:00",
        "timestamp": "1774018966",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf589670-67fd-460b-bb9b-1e375582c234",
        "value": "kls-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:46+00:00",
        "timestamp": "1774018966",
        "to_ids": true,
        "type": "domain",
        "uuid": "d73c7bbb-bc55-4b59-b3cf-ef2b3beb1988",
        "value": "kmy-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:47+00:00",
        "timestamp": "1774018967",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf1762a4-420e-4e61-9f5a-783de673eaab",
        "value": "kpe-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:47+00:00",
        "timestamp": "1774018967",
        "to_ids": true,
        "type": "domain",
        "uuid": "64fbb427-d3c3-45cb-82c8-dc28afa0e80a",
        "value": "kpn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:47+00:00",
        "timestamp": "1774018967",
        "to_ids": true,
        "type": "domain",
        "uuid": "1513a687-54a8-4c4b-97ea-1aa944725305",
        "value": "kpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:47+00:00",
        "timestamp": "1774018967",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7165c17-7340-46fb-bbcc-9d4c94a70c0a",
        "value": "kqm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:47+00:00",
        "timestamp": "1774018967",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b411165-bd43-4ddf-9c39-4a0cd0c81eb5",
        "value": "kqr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:47+00:00",
        "timestamp": "1774018967",
        "to_ids": true,
        "type": "domain",
        "uuid": "34bab092-baef-4a4a-92b9-bfe44926c3fe",
        "value": "kqs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:47+00:00",
        "timestamp": "1774018968",
        "to_ids": true,
        "type": "domain",
        "uuid": "156e0c23-a07c-4c3b-955b-8f2d3f9585cc",
        "value": "kr-api-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:48+00:00",
        "timestamp": "1774018968",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5738532-73b7-4200-af7a-bad72c4e2752",
        "value": "kr-web-api-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:48+00:00",
        "timestamp": "1774018969",
        "to_ids": true,
        "type": "domain",
        "uuid": "18eb3ec8-2bd9-4e7c-9112-21b9118db5e7",
        "value": "krh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:49+00:00",
        "timestamp": "1774018969",
        "to_ids": true,
        "type": "domain",
        "uuid": "80ee5eb0-9ded-4fc3-bdc9-d39ba9079b15",
        "value": "kst-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:49+00:00",
        "timestamp": "1774018969",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa841509-d917-4cfb-b537-592ffef43d8e",
        "value": "kt.e-app-g-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:49+00:00",
        "timestamp": "1774018969",
        "to_ids": true,
        "type": "domain",
        "uuid": "13048871-f73e-4f5a-a789-18f2b8dbd29e",
        "value": "kuo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:49+00:00",
        "timestamp": "1774018969",
        "to_ids": true,
        "type": "domain",
        "uuid": "09022fba-828d-4fe1-9461-9b4b4a05b893",
        "value": "kwd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:49+00:00",
        "timestamp": "1774018969",
        "to_ids": true,
        "type": "domain",
        "uuid": "c45d5995-1504-49d0-a976-e6980ad031a3",
        "value": "kxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:49+00:00",
        "timestamp": "1774018969",
        "to_ids": true,
        "type": "domain",
        "uuid": "033b4dc0-8a5c-43e3-b433-4a6efb26d831",
        "value": "kya-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:50+00:00",
        "timestamp": "1774018970",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4afbb06-970a-484d-b1b9-32898c4b1036",
        "value": "kzb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:50+00:00",
        "timestamp": "1774018970",
        "to_ids": true,
        "type": "domain",
        "uuid": "c33816d3-800a-42d5-8517-052c52b9d891",
        "value": "kzc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:50+00:00",
        "timestamp": "1774018970",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cabea90-df5a-44a0-a078-3feb7cdd3d8c",
        "value": "kzd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:50+00:00",
        "timestamp": "1774018970",
        "to_ids": true,
        "type": "domain",
        "uuid": "22bc9cfe-c837-41a8-bcaf-1e94c0f960c6",
        "value": "kzm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:50+00:00",
        "timestamp": "1774018970",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9a4d206-2110-473c-bb29-c57cfae80b3f",
        "value": "kzt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:50+00:00",
        "timestamp": "1774018970",
        "to_ids": true,
        "type": "domain",
        "uuid": "df6c8b58-094b-4c29-a141-69f92bf87ba7",
        "value": "l-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:50+00:00",
        "timestamp": "1774018971",
        "to_ids": true,
        "type": "domain",
        "uuid": "58fd20f4-b190-41bb-b7d5-6014f8496835",
        "value": "l-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:51+00:00",
        "timestamp": "1774018971",
        "to_ids": true,
        "type": "domain",
        "uuid": "e31c3820-31fd-49b2-883e-98a365bec5a8",
        "value": "l-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:51+00:00",
        "timestamp": "1774018971",
        "to_ids": true,
        "type": "domain",
        "uuid": "52a126ad-6022-44c3-8507-833c8e510dab",
        "value": "l-wap-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:51+00:00",
        "timestamp": "1774018971",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b6174ba-e6ae-4ac1-b6bc-a5edf77a61b3",
        "value": "l-x-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:51+00:00",
        "timestamp": "1774018971",
        "to_ids": true,
        "type": "domain",
        "uuid": "f276b656-7c37-4ed7-be3f-019a4f98d8ef",
        "value": "lab-apps-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:51+00:00",
        "timestamp": "1774018971",
        "to_ids": true,
        "type": "domain",
        "uuid": "eec911ca-1517-4dff-8c30-f789333adad2",
        "value": "lane-web-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:51+00:00",
        "timestamp": "1774018971",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb41014a-27ff-4741-8591-66aea1d3b245",
        "value": "lbf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:51+00:00",
        "timestamp": "1774018972",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7aaece4-e940-4024-9934-c1f8879d5759",
        "value": "lbi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:52+00:00",
        "timestamp": "1774018972",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd8a13d9-5a2c-41de-ac4c-c1b7491c76e7",
        "value": "lbx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:52+00:00",
        "timestamp": "1774018972",
        "to_ids": true,
        "type": "domain",
        "uuid": "35a64d0f-9469-422e-afc4-deab88e8fe90",
        "value": "lcz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:52+00:00",
        "timestamp": "1774018972",
        "to_ids": true,
        "type": "domain",
        "uuid": "fabab26b-1071-434c-8eba-606220ca0a27",
        "value": "ld.q-web-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:52+00:00",
        "timestamp": "1774018972",
        "to_ids": true,
        "type": "domain",
        "uuid": "b58a99b1-3392-4313-abf0-10965caf2f7e",
        "value": "lga-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:52+00:00",
        "timestamp": "1774018973",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3a82507-2cb3-435a-b1b2-7020481b8e28",
        "value": "lgp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:53+00:00",
        "timestamp": "1774018973",
        "to_ids": true,
        "type": "domain",
        "uuid": "dce77f71-4652-421c-85c9-0ceb6d9e5a8c",
        "value": "lhd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:53+00:00",
        "timestamp": "1774018973",
        "to_ids": true,
        "type": "domain",
        "uuid": "578fef06-42fc-47f7-becb-2a2990cb1257",
        "value": "lhm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:53+00:00",
        "timestamp": "1774018973",
        "to_ids": true,
        "type": "domain",
        "uuid": "af507973-3aec-44d2-97a4-22998ff12a90",
        "value": "line-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:53+00:00",
        "timestamp": "1774018973",
        "to_ids": true,
        "type": "domain",
        "uuid": "21c8b683-a634-4855-b600-e5682381c582",
        "value": "link-eu-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:53+00:00",
        "timestamp": "1774018973",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa8c1ea8-beb3-4fc5-95da-3f3b4f29d709",
        "value": "linkapp-net-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:53+00:00",
        "timestamp": "1774018973",
        "to_ids": true,
        "type": "domain",
        "uuid": "a641816c-ff80-45cf-afca-0e3e10d209eb",
        "value": "linkapp-pro-hk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:54+00:00",
        "timestamp": "1774018974",
        "to_ids": true,
        "type": "domain",
        "uuid": "41c7ee1a-ce3a-4f3e-98a0-56b8f2f23df3",
        "value": "linkweb-cn-live-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:54+00:00",
        "timestamp": "1774018974",
        "to_ids": true,
        "type": "domain",
        "uuid": "673b9926-e048-420d-b2cb-d3aa94df392a",
        "value": "lmi-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:54+00:00",
        "timestamp": "1774018974",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b705f89-2979-4151-b0c1-6c1619062c70",
        "value": "lmn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:54+00:00",
        "timestamp": "1774018974",
        "to_ids": true,
        "type": "domain",
        "uuid": "7517f207-71ab-4342-979e-6f0b347818a6",
        "value": "lmn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:54+00:00",
        "timestamp": "1774018974",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca803bd0-3be8-4f56-84f1-0e4572abf6c6",
        "value": "lmt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:54+00:00",
        "timestamp": "1774018974",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9fa87be-8bef-4160-bfa0-9ec23d1e4dab",
        "value": "lmx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:54+00:00",
        "timestamp": "1774018975",
        "to_ids": true,
        "type": "domain",
        "uuid": "76193a23-64be-4571-995a-4e38d5c0edbf",
        "value": "lnp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:55+00:00",
        "timestamp": "1774018975",
        "to_ids": true,
        "type": "domain",
        "uuid": "b349abce-f9fd-46a9-bac9-de7eefadf202",
        "value": "lof-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:55+00:00",
        "timestamp": "1774018975",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f1519ac-db4e-49d0-a2af-c007b1a77ab3",
        "value": "login-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:55+00:00",
        "timestamp": "1774018975",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c979be4-7ea0-4bb7-b47d-676aa243d8fb",
        "value": "login-faq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:55+00:00",
        "timestamp": "1774018975",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddd06be2-48cc-43f1-993d-3db37a2f96dd",
        "value": "login-web-au-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:55+00:00",
        "timestamp": "1774018975",
        "to_ids": true,
        "type": "domain",
        "uuid": "52a8b5d8-d4b2-4477-9a60-c160f8a74e9b",
        "value": "logo-bk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:55+00:00",
        "timestamp": "1774018976",
        "to_ids": true,
        "type": "domain",
        "uuid": "37be1988-257f-4398-8a91-82bc7074ec15",
        "value": "logo-fn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:56+00:00",
        "timestamp": "1774018976",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0893f0d-0f4d-422c-b38a-2458db836d84",
        "value": "logo-jq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:56+00:00",
        "timestamp": "1774018976",
        "to_ids": true,
        "type": "domain",
        "uuid": "015eefe0-b53e-4ae2-a749-1431a40f9ceb",
        "value": "logo-kp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:56+00:00",
        "timestamp": "1774018976",
        "to_ids": true,
        "type": "domain",
        "uuid": "d86c4c0e-6dbc-4761-b714-fd8971198692",
        "value": "logo-lg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:56+00:00",
        "timestamp": "1774018976",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dac8d11-77c6-4c25-a84b-14b7f8ac608f",
        "value": "logo-mh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:56+00:00",
        "timestamp": "1774018976",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ae40637-9512-4cc5-8700-7a763ebd14c7",
        "value": "logo-td-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:56+00:00",
        "timestamp": "1774018976",
        "to_ids": true,
        "type": "domain",
        "uuid": "58b5f1f5-50fc-4f92-91b5-e3a777bccb51",
        "value": "logo-vu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:56+00:00",
        "timestamp": "1774018977",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f54fba6-9729-48ff-ae3a-2970eaa634e3",
        "value": "logo-xr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:57+00:00",
        "timestamp": "1774018977",
        "to_ids": true,
        "type": "domain",
        "uuid": "41cce597-8d78-403b-b5e6-09cc0e799f58",
        "value": "logo-zv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:57+00:00",
        "timestamp": "1774018977",
        "to_ids": true,
        "type": "domain",
        "uuid": "6da7b556-4bb2-4fde-abe1-f9308266278e",
        "value": "loq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:57+00:00",
        "timestamp": "1774018977",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cac91ca-be1e-43a2-93ee-3e76ed72b8da",
        "value": "lpf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:57+00:00",
        "timestamp": "1774018977",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad62ab1e-37ed-445c-b51f-e5f65cc7d7b6",
        "value": "lpg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:57+00:00",
        "timestamp": "1774018977",
        "to_ids": true,
        "type": "domain",
        "uuid": "71769170-3ee1-4c19-8af8-e8a495d3ddff",
        "value": "lq.r-wap-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:57+00:00",
        "timestamp": "1774018978",
        "to_ids": true,
        "type": "domain",
        "uuid": "91a052ca-3c1e-4d56-9991-d4a95c4ee0be",
        "value": "lqr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:58+00:00",
        "timestamp": "1774018978",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb99e534-fecc-47b3-9296-9d1106126c39",
        "value": "lqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:58+00:00",
        "timestamp": "1774018978",
        "to_ids": true,
        "type": "domain",
        "uuid": "6add713a-2d42-4f40-9134-3a7b3bd8b309",
        "value": "lrb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:58+00:00",
        "timestamp": "1774018978",
        "to_ids": true,
        "type": "domain",
        "uuid": "f96d35b1-fbaf-459b-8308-281d0a0a6656",
        "value": "lst-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:58+00:00",
        "timestamp": "1774018978",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd365d01-e7ac-46a8-94ba-9a5a6ed56737",
        "value": "lvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:58+00:00",
        "timestamp": "1774018978",
        "to_ids": true,
        "type": "domain",
        "uuid": "b66a5e61-822f-4408-9103-89d71902d454",
        "value": "lvw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:58+00:00",
        "timestamp": "1774018978",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f14e08a-914c-4434-8abb-6ffe8777c432",
        "value": "lwb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:58+00:00",
        "timestamp": "1774018979",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f1241b5-09b8-4de3-88c6-e23ee74636d2",
        "value": "lwd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:59+00:00",
        "timestamp": "1774018979",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b97da0d-0549-405c-805c-ddedd9b5687c",
        "value": "lyg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:59+00:00",
        "timestamp": "1774018979",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e567d9e-3dfd-41e4-8337-655d21350bac",
        "value": "lzb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:59+00:00",
        "timestamp": "1774018979",
        "to_ids": true,
        "type": "domain",
        "uuid": "96e2be16-831f-40fa-9bad-e5beac58f258",
        "value": "lzd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:59+00:00",
        "timestamp": "1774018979",
        "to_ids": true,
        "type": "domain",
        "uuid": "214f879a-1cb0-4091-ad72-b42570ccfd60",
        "value": "lzf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:59+00:00",
        "timestamp": "1774018979",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6844517-6414-4898-b898-7193417108a5",
        "value": "lzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:02:59+00:00",
        "timestamp": "1774018980",
        "to_ids": true,
        "type": "domain",
        "uuid": "435105ed-45a1-40a9-a710-b0d7ce106715",
        "value": "lzx-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:00+00:00",
        "timestamp": "1774018980",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa59208d-abde-43d9-9d83-4803e398ff9c",
        "value": "m-app-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:00+00:00",
        "timestamp": "1774018980",
        "to_ids": true,
        "type": "domain",
        "uuid": "1aa557af-2fbb-4194-a560-71be947b729d",
        "value": "m-n-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:00+00:00",
        "timestamp": "1774018980",
        "to_ids": true,
        "type": "domain",
        "uuid": "79a11d7a-4642-4eaa-b315-e8d11b294a85",
        "value": "m-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:00+00:00",
        "timestamp": "1774018980",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd98345d-0602-44d6-a722-176d50322051",
        "value": "m-u-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:00+00:00",
        "timestamp": "1774018980",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd2926c8-161c-4b7a-9069-6da7becdd646",
        "value": "m-w-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:00+00:00",
        "timestamp": "1774018980",
        "to_ids": true,
        "type": "domain",
        "uuid": "cde25186-e2e6-43d5-8370-ce8fc6756656",
        "value": "m-wap-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:00+00:00",
        "timestamp": "1774018981",
        "to_ids": true,
        "type": "domain",
        "uuid": "82825def-6f31-41ec-8aa7-324d2df26aa0",
        "value": "m-web-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:01+00:00",
        "timestamp": "1774018981",
        "to_ids": true,
        "type": "domain",
        "uuid": "368a4909-8a86-4697-b31f-8b36cf2dec20",
        "value": "m-y-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:01+00:00",
        "timestamp": "1774018981",
        "to_ids": true,
        "type": "domain",
        "uuid": "c51ab55e-9d87-4519-a038-0253e3f1143d",
        "value": "ma.hk-bkd-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:01+00:00",
        "timestamp": "1774018981",
        "to_ids": true,
        "type": "domain",
        "uuid": "6828b507-b881-4a76-9f95-4e20806cb1fd",
        "value": "mate-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:01+00:00",
        "timestamp": "1774018981",
        "to_ids": true,
        "type": "domain",
        "uuid": "00acde6d-e49d-41db-abf5-8708b161fee3",
        "value": "matrix-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:01+00:00",
        "timestamp": "1774018981",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2d66cd9-17fb-48c0-9d31-b0fe4a2bc382",
        "value": "mde-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:01+00:00",
        "timestamp": "1774018981",
        "to_ids": true,
        "type": "domain",
        "uuid": "6088674f-4125-4263-b7e9-46474cb69164",
        "value": "mhs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:02+00:00",
        "timestamp": "1774018982",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e692160-4665-4fd4-ad9c-4af8ea6865d6",
        "value": "mks-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:02+00:00",
        "timestamp": "1774018982",
        "to_ids": true,
        "type": "domain",
        "uuid": "b370f121-f9fd-4edb-bfa4-c5921245dcf2",
        "value": "mlc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:02+00:00",
        "timestamp": "1774018982",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea694a00-61d3-4ff4-8775-5e82f701a54a",
        "value": "mnj-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:02+00:00",
        "timestamp": "1774018982",
        "to_ids": true,
        "type": "domain",
        "uuid": "b026cb57-9965-4d24-8d50-f9a93807ca58",
        "value": "mnj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:02+00:00",
        "timestamp": "1774018982",
        "to_ids": true,
        "type": "domain",
        "uuid": "248a7af5-2939-4640-be30-e2fb4a10b047",
        "value": "mnp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:02+00:00",
        "timestamp": "1774018982",
        "to_ids": true,
        "type": "domain",
        "uuid": "adcddcef-61d3-4511-bff5-fb733ff6867c",
        "value": "mpg-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:02+00:00",
        "timestamp": "1774018983",
        "to_ids": true,
        "type": "domain",
        "uuid": "00a9d32f-a4be-4a28-8ce1-f42b3bd576cd",
        "value": "mpg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:03+00:00",
        "timestamp": "1774018983",
        "to_ids": true,
        "type": "domain",
        "uuid": "50cc0081-9163-4760-bf42-582dbc4b2216",
        "value": "mpn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:03+00:00",
        "timestamp": "1774018983",
        "to_ids": true,
        "type": "domain",
        "uuid": "fafadf55-bb86-4c98-8480-a0a2eab0ef85",
        "value": "mrf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:03+00:00",
        "timestamp": "1774018983",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a9264b8-c852-459c-94b0-f3c483b68a89",
        "value": "msg-app-zone-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:03+00:00",
        "timestamp": "1774018983",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f2661c0-9d5a-47d6-81a7-ed4b3e479a72",
        "value": "msg-live-app-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:03+00:00",
        "timestamp": "1774018983",
        "to_ids": true,
        "type": "domain",
        "uuid": "4041441b-f19e-41fc-975e-113ecbdc7cd1",
        "value": "msg-web-zone-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:03+00:00",
        "timestamp": "1774018983",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b9e43a1-2ab1-4520-9d17-2174283cedf5",
        "value": "msgapp-hub-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:03+00:00",
        "timestamp": "1774018984",
        "to_ids": true,
        "type": "domain",
        "uuid": "e67b16e0-7668-4595-acba-364f398787f0",
        "value": "msgapp-pro-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:04+00:00",
        "timestamp": "1774018984",
        "to_ids": true,
        "type": "domain",
        "uuid": "60e09921-23c9-4ea0-bccd-246e439fceee",
        "value": "msgsite-pro-hk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:04+00:00",
        "timestamp": "1774018984",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c7b682c-59a3-439e-a35f-1f9476a3e33e",
        "value": "mst-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:04+00:00",
        "timestamp": "1774018984",
        "to_ids": true,
        "type": "domain",
        "uuid": "48956848-a4e7-4e76-a11b-1280ff716a75",
        "value": "msu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:04+00:00",
        "timestamp": "1774018984",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b37922c-2bb5-4a64-a03c-32f324a312fe",
        "value": "mtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:04+00:00",
        "timestamp": "1774018984",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e035d33-0e46-4b3a-aa66-22b957a44486",
        "value": "mvd-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:04+00:00",
        "timestamp": "1774018984",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e7685d3-2f54-47ad-bebd-76f1ac2d8383",
        "value": "mvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:04+00:00",
        "timestamp": "1774018985",
        "to_ids": true,
        "type": "domain",
        "uuid": "af7efc88-4b98-46a4-97ac-97478f887bab",
        "value": "mvs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:05+00:00",
        "timestamp": "1774018985",
        "to_ids": true,
        "type": "domain",
        "uuid": "b77e5bee-4e9c-4894-bcbc-dbf79d60a66f",
        "value": "mvw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:05+00:00",
        "timestamp": "1774018985",
        "to_ids": true,
        "type": "domain",
        "uuid": "f65138fe-71d8-435c-aff5-bf49f505a772",
        "value": "mwn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:05+00:00",
        "timestamp": "1774018985",
        "to_ids": true,
        "type": "domain",
        "uuid": "dde9540e-9f7b-4382-8421-ee6103617250",
        "value": "mxl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:05+00:00",
        "timestamp": "1774018985",
        "to_ids": true,
        "type": "domain",
        "uuid": "e73da206-49d9-44d3-b45f-372b88baa578",
        "value": "mxq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:05+00:00",
        "timestamp": "1774018985",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ba52a18-175c-4a03-bc3d-88caa945c0fb",
        "value": "mzg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:05+00:00",
        "timestamp": "1774018986",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec44380b-28e7-4a09-be1f-a3a94b239aa2",
        "value": "n-u-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:06+00:00",
        "timestamp": "1774018986",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d356d9c-21a1-4543-b65f-649ea5d5df70",
        "value": "n-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:06+00:00",
        "timestamp": "1774018986",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d62ce18-bfa2-44c2-96b1-3b08f71b0a69",
        "value": "n-wap-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:06+00:00",
        "timestamp": "1774018986",
        "to_ids": true,
        "type": "domain",
        "uuid": "31b76d31-a076-402c-89d7-d57b0c194033",
        "value": "n-web-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:06+00:00",
        "timestamp": "1774018986",
        "to_ids": true,
        "type": "domain",
        "uuid": "f69d8aeb-b089-4fa0-944b-4ceb14941270",
        "value": "n-x-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:06+00:00",
        "timestamp": "1774018986",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7fcf29c-54c7-4bd3-b8b4-f83c46bd7887",
        "value": "n-y-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:06+00:00",
        "timestamp": "1774018986",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcfc7125-65c2-4c86-86a6-5dfcb15481de",
        "value": "n9.wap-wdo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:06+00:00",
        "timestamp": "1774018987",
        "to_ids": true,
        "type": "domain",
        "uuid": "4afa3c16-1ac8-4847-9e99-f2db4ec69f58",
        "value": "n9.web-py-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:07+00:00",
        "timestamp": "1774018987",
        "to_ids": true,
        "type": "domain",
        "uuid": "f19052ca-9e56-42be-b6dc-47a07830dfcf",
        "value": "ncd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:07+00:00",
        "timestamp": "1774018987",
        "to_ids": true,
        "type": "domain",
        "uuid": "22e722ec-304f-43a3-a412-617d0c714e12",
        "value": "ncz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:07+00:00",
        "timestamp": "1774018987",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddac825a-f22f-43e0-9260-ed1a5a6d8704",
        "value": "net-web-hk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:07+00:00",
        "timestamp": "1774018987",
        "to_ids": true,
        "type": "domain",
        "uuid": "fec38135-dcdb-4dde-b2ba-04c3f40efb8c",
        "value": "nfw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:07+00:00",
        "timestamp": "1774018987",
        "to_ids": true,
        "type": "domain",
        "uuid": "71cc07c2-655a-4603-895a-223e2ea8cea4",
        "value": "ngp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:07+00:00",
        "timestamp": "1774018987",
        "to_ids": true,
        "type": "domain",
        "uuid": "808db2df-2bce-4aa8-92ea-4844898fa7ff",
        "value": "nht-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:07+00:00",
        "timestamp": "1774018988",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5ccd32b-942d-45e6-9a5c-497a6d6cfe61",
        "value": "njf-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:08+00:00",
        "timestamp": "1774018988",
        "to_ids": true,
        "type": "domain",
        "uuid": "a25cde47-48e0-4d4e-97f4-ad6d990ce5b4",
        "value": "njo-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:08+00:00",
        "timestamp": "1774018988",
        "to_ids": true,
        "type": "domain",
        "uuid": "473883c8-b9d6-44f1-990a-40fd8efb68a6",
        "value": "nm.ok-wto-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:08+00:00",
        "timestamp": "1774018988",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbeb6308-76d3-4cdc-87a6-601dd4879dd8",
        "value": "node-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:08+00:00",
        "timestamp": "1774018988",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc899cec-c574-48d8-b176-fdc39309def5",
        "value": "node-web-tw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:08+00:00",
        "timestamp": "1774018988",
        "to_ids": true,
        "type": "domain",
        "uuid": "11050a6b-82e9-4752-a4d1-5e369e3ad629",
        "value": "nok-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:08+00:00",
        "timestamp": "1774018989",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3266b9a-d2d0-464a-9823-0b0562a21cc3",
        "value": "nok-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:09+00:00",
        "timestamp": "1774018989",
        "to_ids": true,
        "type": "domain",
        "uuid": "9dadeed4-f363-41e4-8ba9-b927093d1805",
        "value": "nop-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:09+00:00",
        "timestamp": "1774018989",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d02fa3f-ebc7-47b7-a69f-f344221900cc",
        "value": "nova-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:09+00:00",
        "timestamp": "1774018989",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbe50043-3808-47e8-8338-18ef2ed7c572",
        "value": "nph-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:09+00:00",
        "timestamp": "1774018989",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ec3af78-60ff-4232-a156-cc73193204bf",
        "value": "npq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:09+00:00",
        "timestamp": "1774018989",
        "to_ids": true,
        "type": "domain",
        "uuid": "a349028c-d3cf-479a-ab4f-bad56a09c354",
        "value": "npx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:09+00:00",
        "timestamp": "1774018989",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc6a4153-1d0d-44fa-92c7-c33868fcdfd5",
        "value": "nqf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:09+00:00",
        "timestamp": "1774018990",
        "to_ids": true,
        "type": "domain",
        "uuid": "a376d2fc-fa15-4ea5-a2a1-e131df625d91",
        "value": "nqh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:10+00:00",
        "timestamp": "1774018990",
        "to_ids": true,
        "type": "domain",
        "uuid": "8287e21c-1b09-4634-8aef-be03fd9f3062",
        "value": "nqr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:10+00:00",
        "timestamp": "1774018990",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2c48979-2120-4a97-b1df-f7788488fd1b",
        "value": "nqs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:10+00:00",
        "timestamp": "1774018990",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7fd766a-2ee6-471f-b5ca-e9577f31e7f3",
        "value": "nqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:10+00:00",
        "timestamp": "1774018990",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e81b944-eb08-4cb8-b0f2-4366b9674eef",
        "value": "nqw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:10+00:00",
        "timestamp": "1774018990",
        "to_ids": true,
        "type": "domain",
        "uuid": "74cb91b1-ed5d-4c66-9ff5-049a3863e0aa",
        "value": "nrg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:10+00:00",
        "timestamp": "1774018991",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f0a37c8-b927-482a-8c10-8e680978cded",
        "value": "nst-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:11+00:00",
        "timestamp": "1774018991",
        "to_ids": true,
        "type": "domain",
        "uuid": "55fe42a9-e6b9-4cdf-bbb0-549caed362b6",
        "value": "nue-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:11+00:00",
        "timestamp": "1774018991",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa6e903f-e8ea-45d0-897e-c3fb9a2aa8e5",
        "value": "nvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:11+00:00",
        "timestamp": "1774018991",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9c1141f-aaac-4e4a-9d55-982029d9f34d",
        "value": "nwt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:11+00:00",
        "timestamp": "1774018991",
        "to_ids": true,
        "type": "domain",
        "uuid": "1304fbf6-3d20-41e7-af00-35b76992daff",
        "value": "nxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:11+00:00",
        "timestamp": "1774018991",
        "to_ids": true,
        "type": "domain",
        "uuid": "424b033e-12bd-4205-a577-df74d9fdcc3e",
        "value": "nzb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:11+00:00",
        "timestamp": "1774018991",
        "to_ids": true,
        "type": "domain",
        "uuid": "26e8fabd-f86c-416f-9b86-ebba0a94319f",
        "value": "o-a-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:12+00:00",
        "timestamp": "1774018992",
        "to_ids": true,
        "type": "domain",
        "uuid": "7efe1caa-49b2-4791-ae0a-483423d06948",
        "value": "o-app-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:12+00:00",
        "timestamp": "1774018992",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd8eeebd-cb37-4fde-bd43-eeb6de415308",
        "value": "o-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:12+00:00",
        "timestamp": "1774018992",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6df29d1-c1e8-4001-afaf-36311ecb0fed",
        "value": "o-w-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:12+00:00",
        "timestamp": "1774018992",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d7bc5f3-30a6-4504-a119-093889971bf3",
        "value": "o-wap-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:12+00:00",
        "timestamp": "1774018992",
        "to_ids": true,
        "type": "domain",
        "uuid": "b16d2160-e4d7-4726-84ea-96ee3340a4cd",
        "value": "o-web-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:12+00:00",
        "timestamp": "1774018992",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4d4fd16-28db-45ae-93aa-09c2c2efd01c",
        "value": "o9.apps-j-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:12+00:00",
        "timestamp": "1774018993",
        "to_ids": true,
        "type": "domain",
        "uuid": "3761e515-2143-45ae-afcb-168603547e70",
        "value": "ode-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:13+00:00",
        "timestamp": "1774018993",
        "to_ids": true,
        "type": "domain",
        "uuid": "98a6e8a5-b744-45d5-90f0-50dbac76adce",
        "value": "ohv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:13+00:00",
        "timestamp": "1774018993",
        "to_ids": true,
        "type": "domain",
        "uuid": "35612881-be7c-4dce-b85d-cb34e883043b",
        "value": "oj.apps-o-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:13+00:00",
        "timestamp": "1774018993",
        "to_ids": true,
        "type": "domain",
        "uuid": "843b08cb-5fc4-412a-8e7d-f468b60a2736",
        "value": "ok-bkg-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:13+00:00",
        "timestamp": "1774018993",
        "to_ids": true,
        "type": "domain",
        "uuid": "704f0ca5-a9ac-4a91-829f-304070a5d1ea",
        "value": "ok-bqx-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:13+00:00",
        "timestamp": "1774018993",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5712709-0862-4107-a419-a107f4b96d63",
        "value": "ok-csl-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:13+00:00",
        "timestamp": "1774018993",
        "to_ids": true,
        "type": "domain",
        "uuid": "d11c0448-a939-4874-8867-055a6a780565",
        "value": "ok-dax-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:13+00:00",
        "timestamp": "1774018994",
        "to_ids": true,
        "type": "domain",
        "uuid": "59939aa0-83e3-4354-bc57-23247663d2c0",
        "value": "ok-dxp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:14+00:00",
        "timestamp": "1774018994",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2bb6b80-3282-457f-a038-0cb4083012d2",
        "value": "ok-ekd-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:14+00:00",
        "timestamp": "1774018994",
        "to_ids": true,
        "type": "domain",
        "uuid": "634e1d44-383d-4a26-ae41-cc280fdd5151",
        "value": "ok-fji-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:14+00:00",
        "timestamp": "1774018994",
        "to_ids": true,
        "type": "domain",
        "uuid": "8eb58689-dcae-4479-b61f-17110cd9ead3",
        "value": "ok-fnr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:14+00:00",
        "timestamp": "1774018994",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b2c634f-ed3a-4aa8-9123-1d7b4e5ba31d",
        "value": "ok-fwt-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:14+00:00",
        "timestamp": "1774018994",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fad22b6-961e-4587-8f36-288cbaf46a95",
        "value": "ok-gdp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:14+00:00",
        "timestamp": "1774018994",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e56e297-7b76-4953-bf4e-786ac3429fe9",
        "value": "ok-hrp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:14+00:00",
        "timestamp": "1774018995",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e9b10f8-5c74-4afe-b57a-a435e5e50a29",
        "value": "ok-jow-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:15+00:00",
        "timestamp": "1774018995",
        "to_ids": true,
        "type": "domain",
        "uuid": "78b25fa7-7e33-4a9c-93d7-52c88f2d4bfb",
        "value": "ok-kia-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:15+00:00",
        "timestamp": "1774018995",
        "to_ids": true,
        "type": "domain",
        "uuid": "c63e5e0d-0cbc-4cf4-94d6-aceac57d9634",
        "value": "ok-kpe-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:15+00:00",
        "timestamp": "1774018995",
        "to_ids": true,
        "type": "domain",
        "uuid": "020b89e9-d279-4d95-9d68-65fc2f0232c8",
        "value": "ok-lgp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:15+00:00",
        "timestamp": "1774018995",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9da3435-59d8-4232-8e3b-a0c5a89b5231",
        "value": "ok-lza-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:15+00:00",
        "timestamp": "1774018995",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca1e1007-915b-4883-ace6-4effd1c32b84",
        "value": "ok-mfd-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:15+00:00",
        "timestamp": "1774018995",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4f08c93-2415-4283-b323-1b5036008ebc",
        "value": "ok-nue-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:15+00:00",
        "timestamp": "1774018996",
        "to_ids": true,
        "type": "domain",
        "uuid": "736538c3-8e5f-41c2-9200-b285bf064455",
        "value": "ok-nuh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:16+00:00",
        "timestamp": "1774018996",
        "to_ids": true,
        "type": "domain",
        "uuid": "50ea56a0-6ab2-4c06-995c-56fec155f292",
        "value": "ok-oaq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:16+00:00",
        "timestamp": "1774018996",
        "to_ids": true,
        "type": "domain",
        "uuid": "edd29d4c-3150-4374-864a-c5d0c77dc038",
        "value": "ok-oxf-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:16+00:00",
        "timestamp": "1774018996",
        "to_ids": true,
        "type": "domain",
        "uuid": "86063192-b0cb-47a2-b564-c0d186567100",
        "value": "ok-pmy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:16+00:00",
        "timestamp": "1774018996",
        "to_ids": true,
        "type": "domain",
        "uuid": "38ec4b72-46b3-4f6b-8ab3-add9ccd75a9c",
        "value": "ok-rpt-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:16+00:00",
        "timestamp": "1774018996",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a1f8230-2668-4f5f-b38d-22cafb09b595",
        "value": "ok-sjl-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:16+00:00",
        "timestamp": "1774018997",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ee7af59-7ec3-43b9-a614-a15febe5d0e6",
        "value": "ok-tdz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:17+00:00",
        "timestamp": "1774018997",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ee40a6f-bd7d-4b9e-ba47-478ef2a6e2ca",
        "value": "ok-tjq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:17+00:00",
        "timestamp": "1774018997",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc6aefac-3094-4916-a56c-3915eaac3e89",
        "value": "ok-tpz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:17+00:00",
        "timestamp": "1774018997",
        "to_ids": true,
        "type": "domain",
        "uuid": "f405d09a-d6f4-41a9-9971-1b4d180c96a3",
        "value": "ok-uro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:17+00:00",
        "timestamp": "1774018997",
        "to_ids": true,
        "type": "domain",
        "uuid": "59993b50-855d-4bf7-bba8-498409edb462",
        "value": "ok-vce-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:17+00:00",
        "timestamp": "1774018997",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc0e0e7b-9eeb-45ca-9efd-29afd47533d3",
        "value": "ok-vub-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:17+00:00",
        "timestamp": "1774018997",
        "to_ids": true,
        "type": "domain",
        "uuid": "79ea36d9-b439-4f84-aab1-3568f92414e1",
        "value": "ok-vwy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:17+00:00",
        "timestamp": "1774018998",
        "to_ids": true,
        "type": "domain",
        "uuid": "c41004af-699c-4f5e-a5bf-e5517358533f",
        "value": "ok-vyu-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:18+00:00",
        "timestamp": "1774018998",
        "to_ids": true,
        "type": "domain",
        "uuid": "40718f8c-f70b-42c2-ac43-3ce50c1ade4f",
        "value": "ok-wkh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:18+00:00",
        "timestamp": "1774018998",
        "to_ids": true,
        "type": "domain",
        "uuid": "bedd319c-5de1-4e9a-8002-596c141a6e49",
        "value": "ok-wto-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:18+00:00",
        "timestamp": "1774018998",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0215e3e-bb37-439e-972a-3a251c6743a1",
        "value": "ok-xra-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:18+00:00",
        "timestamp": "1774018998",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1d63bc3-8754-4b8c-9085-b7c944c9e00f",
        "value": "ok-zcr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:18+00:00",
        "timestamp": "1774018998",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2b54227-8687-431b-8416-ac414504cbdd",
        "value": "ok-zqn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:18+00:00",
        "timestamp": "1774018998",
        "to_ids": true,
        "type": "domain",
        "uuid": "1741cab1-1729-4cd7-9ca1-dc2086f0c76f",
        "value": "ok-zvc-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:18+00:00",
        "timestamp": "1774018999",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8db23f5-663b-428a-87db-5245ad99d231",
        "value": "okp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:19+00:00",
        "timestamp": "1774018999",
        "to_ids": true,
        "type": "domain",
        "uuid": "36baa501-f90c-46e5-a5b4-edb670d1aae8",
        "value": "online-chat-hub-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:19+00:00",
        "timestamp": "1774018999",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb694847-75d4-4703-ae14-c044cc1d7382",
        "value": "online-hub-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:19+00:00",
        "timestamp": "1774018999",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a3f3563-d70e-4ccd-b9ef-29b8f2ede454",
        "value": "online-im-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:19+00:00",
        "timestamp": "1774018999",
        "to_ids": true,
        "type": "domain",
        "uuid": "239c150f-886e-4240-9e1d-05897b2b8e00",
        "value": "onlineapp-hk-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:19+00:00",
        "timestamp": "1774018999",
        "to_ids": true,
        "type": "domain",
        "uuid": "56f6c202-4c11-44c5-9137-4373582e1d02",
        "value": "onlinehub-cn-net-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:19+00:00",
        "timestamp": "1774018999",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6904378-3912-4f1c-ac7c-e871afa9fded",
        "value": "onlineim-cn-pro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:20+00:00",
        "timestamp": "1774019000",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9872c7d-a631-4204-867e-94b0a0554b6f",
        "value": "onlineim-pro-hk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:20+00:00",
        "timestamp": "1774019000",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5a2c3ba-0ce7-4787-94d7-5593272c777e",
        "value": "onlineweb-hk-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:20+00:00",
        "timestamp": "1774019000",
        "to_ids": true,
        "type": "domain",
        "uuid": "07a4039f-766b-47fc-b9df-0388d0e174ca",
        "value": "onweb-app-net-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:20+00:00",
        "timestamp": "1774019000",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b656fdc-1505-4edb-b57c-172a6c2fd3fb",
        "value": "opq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:20+00:00",
        "timestamp": "1774019000",
        "to_ids": true,
        "type": "domain",
        "uuid": "469bc60d-62c9-4988-8131-510c8c4cd9a2",
        "value": "opx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:20+00:00",
        "timestamp": "1774019000",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d3f12b1-491c-405f-a678-fe98f9928a1a",
        "value": "oqr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:20+00:00",
        "timestamp": "1774019001",
        "to_ids": true,
        "type": "domain",
        "uuid": "904d4faf-3fa6-4777-87e8-0f4233183776",
        "value": "oqy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:21+00:00",
        "timestamp": "1774019001",
        "to_ids": true,
        "type": "domain",
        "uuid": "07e1d942-98d8-4033-a7d9-57f5025d60fb",
        "value": "org-web-tw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:21+00:00",
        "timestamp": "1774019001",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf437f22-de39-4205-8ca8-83ddc1bb3850",
        "value": "ori-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:21+00:00",
        "timestamp": "1774019001",
        "to_ids": true,
        "type": "domain",
        "uuid": "c372d3a7-374f-4a1e-b00d-a4d49cedb032",
        "value": "ori-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:21+00:00",
        "timestamp": "1774019001",
        "to_ids": true,
        "type": "domain",
        "uuid": "0012f8ac-7294-4398-9abb-dcc51d71cc4c",
        "value": "oxv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:21+00:00",
        "timestamp": "1774019001",
        "to_ids": true,
        "type": "domain",
        "uuid": "bff716e5-b4e1-4ac3-a263-5a922ade5739",
        "value": "p-o-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:21+00:00",
        "timestamp": "1774019001",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c338fb1-ab54-48bb-97ac-e9bd320f16f2",
        "value": "p-w-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:22+00:00",
        "timestamp": "1774019002",
        "to_ids": true,
        "type": "domain",
        "uuid": "3093a00b-bd30-43d6-aedb-e36facc8e3fa",
        "value": "p-wap-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:22+00:00",
        "timestamp": "1774019002",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed86c19e-c4e3-4c1d-825f-7c30dc09f8b7",
        "value": "p-web-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:22+00:00",
        "timestamp": "1774019002",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a500a68-31b2-4f62-903d-436cd6eaa5ff",
        "value": "p-x-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:22+00:00",
        "timestamp": "1774019002",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a0dbe3a-f834-4348-808a-a6daf42714f1",
        "value": "path-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:22+00:00",
        "timestamp": "1774019002",
        "to_ids": true,
        "type": "domain",
        "uuid": "4769a623-34e5-4d07-b8e7-eb1bbb363e52",
        "value": "pdx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:22+00:00",
        "timestamp": "1774019002",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbb5f0bf-6517-42a6-9e5f-5680b7059a17",
        "value": "pef-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:22+00:00",
        "timestamp": "1774019003",
        "to_ids": true,
        "type": "domain",
        "uuid": "6780d497-af28-4e1a-a95c-3cd0dbc0f4e2",
        "value": "pfx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:23+00:00",
        "timestamp": "1774019003",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a40b0b3-c985-45d6-a3f5-3eefebc71eb2",
        "value": "pht-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:23+00:00",
        "timestamp": "1774019003",
        "to_ids": true,
        "type": "domain",
        "uuid": "b81ecc6f-9029-4a94-a7a7-55e94caca838",
        "value": "pjt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:23+00:00",
        "timestamp": "1774019003",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f7514ec-f9b7-4da6-8d58-39cc03fdfa4b",
        "value": "pkn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:23+00:00",
        "timestamp": "1774019003",
        "to_ids": true,
        "type": "domain",
        "uuid": "d467e9dd-ea84-46b3-b27a-7f0f27d606c7",
        "value": "pks-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:23+00:00",
        "timestamp": "1774019003",
        "to_ids": true,
        "type": "domain",
        "uuid": "571a577d-e2fb-4127-afb3-2abbc293c862",
        "value": "plq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:23+00:00",
        "timestamp": "1774019003",
        "to_ids": true,
        "type": "domain",
        "uuid": "9640916a-2964-46e4-bdd7-343e647bf2eb",
        "value": "plq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:23+00:00",
        "timestamp": "1774019004",
        "to_ids": true,
        "type": "domain",
        "uuid": "b425cb81-768c-4ac9-9c52-eb698b05faea",
        "value": "plv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:24+00:00",
        "timestamp": "1774019004",
        "to_ids": true,
        "type": "domain",
        "uuid": "b255e351-a1cc-418d-9fd4-ab8edd9f7e65",
        "value": "point-apps-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:24+00:00",
        "timestamp": "1774019004",
        "to_ids": true,
        "type": "domain",
        "uuid": "6dc15dc9-ec2e-411f-8e42-faf0c46084c6",
        "value": "point-web-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:24+00:00",
        "timestamp": "1774019004",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2f6bc1b-22c0-47fc-9191-86b7811b60c8",
        "value": "pqm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:24+00:00",
        "timestamp": "1774019004",
        "to_ids": true,
        "type": "domain",
        "uuid": "d07070c2-545d-44e4-a04f-60bc59d43c6e",
        "value": "pqm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:24+00:00",
        "timestamp": "1774019004",
        "to_ids": true,
        "type": "domain",
        "uuid": "c99d6e47-765b-44f6-b302-58fb717f0453",
        "value": "pqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:24+00:00",
        "timestamp": "1774019004",
        "to_ids": true,
        "type": "domain",
        "uuid": "98b6d58d-136a-4f82-88e7-0dbd3de226c8",
        "value": "pqr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:24+00:00",
        "timestamp": "1774019005",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b623f05-bea4-4c35-80d7-b8b7dd07eea5",
        "value": "pro-web-uk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:25+00:00",
        "timestamp": "1774019005",
        "to_ids": true,
        "type": "domain",
        "uuid": "36564b76-8c51-498b-947f-d20f1ef8497f",
        "value": "psj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:25+00:00",
        "timestamp": "1774019005",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5959a35-acea-4a1c-978c-d42c1c185030",
        "value": "pvu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:25+00:00",
        "timestamp": "1774019005",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f330713-03a6-4fad-ba19-1556d7544adb",
        "value": "pxg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:25+00:00",
        "timestamp": "1774019005",
        "to_ids": true,
        "type": "domain",
        "uuid": "39f8365b-849a-4e90-b99f-9f249e192f59",
        "value": "pxm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:25+00:00",
        "timestamp": "1774019005",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8943063-1114-422d-b366-c001d4c7e558",
        "value": "pxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:25+00:00",
        "timestamp": "1774019005",
        "to_ids": true,
        "type": "domain",
        "uuid": "be4d5b17-f571-43d6-b4de-bec2f9799063",
        "value": "pzl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:26+00:00",
        "timestamp": "1774019006",
        "to_ids": true,
        "type": "domain",
        "uuid": "2464c93e-93bc-418b-a017-3ea1502de6a3",
        "value": "pzq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:26+00:00",
        "timestamp": "1774019006",
        "to_ids": true,
        "type": "domain",
        "uuid": "dee19bc7-1a95-4d01-b01c-4fd0f085b658",
        "value": "q-app-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:26+00:00",
        "timestamp": "1774019006",
        "to_ids": true,
        "type": "domain",
        "uuid": "87109e67-5d9d-480b-b955-6b7f7de219ee",
        "value": "q-r-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:26+00:00",
        "timestamp": "1774019006",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab554b38-f819-47c3-8029-1939eae13b4c",
        "value": "q-wap-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:26+00:00",
        "timestamp": "1774019006",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6f999dc-acdc-4ae6-951e-7e657d3c363f",
        "value": "q-web-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:26+00:00",
        "timestamp": "1774019006",
        "to_ids": true,
        "type": "domain",
        "uuid": "290227be-0834-4639-bdf3-f9ad77a7cf2e",
        "value": "q-x-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:26+00:00",
        "timestamp": "1774019007",
        "to_ids": true,
        "type": "domain",
        "uuid": "2794cf22-b410-4b8e-a565-e41a888bb23d",
        "value": "q-y-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:27+00:00",
        "timestamp": "1774019007",
        "to_ids": true,
        "type": "domain",
        "uuid": "b51d2b2e-e15c-476d-aa52-f046e2a62cf1",
        "value": "q4.sync-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:27+00:00",
        "timestamp": "1774019007",
        "to_ids": true,
        "type": "domain",
        "uuid": "db067a5d-41f7-4f97-b0b2-bf55b49ee008",
        "value": "qbn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:27+00:00",
        "timestamp": "1774019007",
        "to_ids": true,
        "type": "domain",
        "uuid": "06ddcd63-6c7a-43a7-9a9c-0c135644d6c3",
        "value": "qfa-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:27+00:00",
        "timestamp": "1774019007",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b2befe8-8e7f-4e58-8a1e-d506c441ce35",
        "value": "qfg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:27+00:00",
        "timestamp": "1774019007",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa2822e1-450d-44c2-a8c2-73c085aa0479",
        "value": "qkr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:27+00:00",
        "timestamp": "1774019008",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9b2fb39-a53a-441a-869f-452de57cc97f",
        "value": "qmr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:28+00:00",
        "timestamp": "1774019008",
        "to_ids": true,
        "type": "domain",
        "uuid": "0559fdfd-edad-4c3f-8afd-5d456ab6de39",
        "value": "qna-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:28+00:00",
        "timestamp": "1774019008",
        "to_ids": true,
        "type": "domain",
        "uuid": "43eb5964-f519-442a-b151-ade8d9f23cfc",
        "value": "qoz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:28+00:00",
        "timestamp": "1774019008",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0935afa-d198-410f-b1b6-1f9f2eb141e7",
        "value": "qra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:28+00:00",
        "timestamp": "1774019008",
        "to_ids": true,
        "type": "domain",
        "uuid": "196d7807-aff5-43fd-ae8f-9e4dc4af053b",
        "value": "qrn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:28+00:00",
        "timestamp": "1774019008",
        "to_ids": true,
        "type": "domain",
        "uuid": "b45e0b35-fd7d-4b58-8928-3214c7172920",
        "value": "qrs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:28+00:00",
        "timestamp": "1774019008",
        "to_ids": true,
        "type": "domain",
        "uuid": "51587ba9-b06a-4b30-bb76-23544b1f0203",
        "value": "qrst.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:28+00:00",
        "timestamp": "1774019009",
        "to_ids": true,
        "type": "domain",
        "uuid": "2171e159-7ab8-452e-922e-2117b8d4d391",
        "value": "qsr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:29+00:00",
        "timestamp": "1774019009",
        "to_ids": true,
        "type": "domain",
        "uuid": "78723e59-fa3b-40b7-bb53-02f23dc63339",
        "value": "qta-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:29+00:00",
        "timestamp": "1774019009",
        "to_ids": true,
        "type": "domain",
        "uuid": "b89413ee-785b-4a9b-81f9-67c44aa59357",
        "value": "qtd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:29+00:00",
        "timestamp": "1774019009",
        "to_ids": true,
        "type": "domain",
        "uuid": "3515fe1d-070e-4c74-abb6-af0fe254121d",
        "value": "qtk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:29+00:00",
        "timestamp": "1774019009",
        "to_ids": true,
        "type": "domain",
        "uuid": "446e6445-6553-4241-8b12-2c8b8a36b122",
        "value": "qtr-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:29+00:00",
        "timestamp": "1774019009",
        "to_ids": true,
        "type": "domain",
        "uuid": "90cbd5f9-4212-46ef-834e-0faa07e00e7d",
        "value": "qtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:29+00:00",
        "timestamp": "1774019009",
        "to_ids": true,
        "type": "domain",
        "uuid": "becd6bed-df5c-40e4-be90-4ed26a88cfc5",
        "value": "qtv-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:30+00:00",
        "timestamp": "1774019010",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec6a5b9a-be77-467e-9628-57225ea12bbb",
        "value": "qtv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:30+00:00",
        "timestamp": "1774019010",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a49fa77-a2dd-4d9c-8336-dd12bae8106f",
        "value": "qtx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:30+00:00",
        "timestamp": "1774019010",
        "to_ids": true,
        "type": "domain",
        "uuid": "315c42c8-1b14-43b2-86c5-61144600ac60",
        "value": "qvl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:30+00:00",
        "timestamp": "1774019010",
        "to_ids": true,
        "type": "domain",
        "uuid": "41738c96-0126-467a-8131-8ae1d64b4d03",
        "value": "qw.im-app-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:30+00:00",
        "timestamp": "1774019010",
        "to_ids": true,
        "type": "domain",
        "uuid": "45333087-95e9-42d1-9f39-b0635f659c25",
        "value": "qwb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:30+00:00",
        "timestamp": "1774019010",
        "to_ids": true,
        "type": "domain",
        "uuid": "61ff7838-bf02-4961-ace9-57e1a8864bf8",
        "value": "qye-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:30+00:00",
        "timestamp": "1774019011",
        "to_ids": true,
        "type": "domain",
        "uuid": "5035f927-f002-4dd8-9026-75c9b4af2d0f",
        "value": "r-c-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:31+00:00",
        "timestamp": "1774019011",
        "to_ids": true,
        "type": "domain",
        "uuid": "1719b589-6281-491f-b5ca-f1ec1f9f015d",
        "value": "r-q-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:31+00:00",
        "timestamp": "1774019011",
        "to_ids": true,
        "type": "domain",
        "uuid": "742be9d9-2e0d-41ee-9158-9e0612813e98",
        "value": "r-wap-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:31+00:00",
        "timestamp": "1774019011",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2956427-511e-424d-8b35-8a306bcb29bf",
        "value": "r-z-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:31+00:00",
        "timestamp": "1774019011",
        "to_ids": true,
        "type": "domain",
        "uuid": "11d422be-8bbb-4999-9b57-c567407edf6a",
        "value": "rdx-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:31+00:00",
        "timestamp": "1774019011",
        "to_ids": true,
        "type": "domain",
        "uuid": "07394d89-5ed6-42d1-b951-c62d282dca23",
        "value": "rfd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:31+00:00",
        "timestamp": "1774019011",
        "to_ids": true,
        "type": "domain",
        "uuid": "b008e630-ed18-4934-881d-1d9aa3faa4b0",
        "value": "rgh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:31+00:00",
        "timestamp": "1774019012",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa89f2d8-255e-4a84-9ac7-64548975b745",
        "value": "rjx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:32+00:00",
        "timestamp": "1774019012",
        "to_ids": true,
        "type": "domain",
        "uuid": "08302dec-9d30-4c87-a81f-79a647cc0952",
        "value": "rns-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:32+00:00",
        "timestamp": "1774019012",
        "to_ids": true,
        "type": "domain",
        "uuid": "11964911-b9b5-46f5-b8da-9706ac9bdd30",
        "value": "ros-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:32+00:00",
        "timestamp": "1774019012",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f7f34e1-1deb-4e54-9874-917214c5bb10",
        "value": "rqc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:32+00:00",
        "timestamp": "1774019012",
        "to_ids": true,
        "type": "domain",
        "uuid": "0727fffd-ba4b-47de-8c95-fd159370d120",
        "value": "rst-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:32+00:00",
        "timestamp": "1774019012",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cc133db-b48c-463e-8f3a-ba8e786321d9",
        "value": "rtv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:32+00:00",
        "timestamp": "1774019012",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfbdfd00-108e-4bcf-a62b-6ccbc7b02c43",
        "value": "rul-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:32+00:00",
        "timestamp": "1774019013",
        "to_ids": true,
        "type": "domain",
        "uuid": "96d5a31c-1553-4bb0-88e2-6ccb2fb03806",
        "value": "ruw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:33+00:00",
        "timestamp": "1774019013",
        "to_ids": true,
        "type": "domain",
        "uuid": "56807fb4-010a-4b24-adeb-2551f6c32283",
        "value": "ruw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:33+00:00",
        "timestamp": "1774019013",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c84c4d4-f063-45c4-8052-657f33629861",
        "value": "rvo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:33+00:00",
        "timestamp": "1774019013",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccd5bee8-cdff-453d-8961-477f44c9d22c",
        "value": "ry.web-cn-h-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:33+00:00",
        "timestamp": "1774019013",
        "to_ids": true,
        "type": "domain",
        "uuid": "e943e98f-488b-4742-882e-0035ef649cdd",
        "value": "ryf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:33+00:00",
        "timestamp": "1774019013",
        "to_ids": true,
        "type": "domain",
        "uuid": "29144ef6-eb1a-4f82-b3d6-418cbd7f7f3b",
        "value": "rym-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:33+00:00",
        "timestamp": "1774019013",
        "to_ids": true,
        "type": "domain",
        "uuid": "b636fa4f-cab0-4d05-935d-51c39920d127",
        "value": "rzt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:33+00:00",
        "timestamp": "1774019014",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e5ed011-b658-4339-8e7e-f2a2481e8628",
        "value": "s-app-u-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:34+00:00",
        "timestamp": "1774019014",
        "to_ids": true,
        "type": "domain",
        "uuid": "76a29b1a-7c91-4209-82f3-b0cd057e556e",
        "value": "s-c-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:34+00:00",
        "timestamp": "1774019014",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d42aeb7-f9a8-452e-b298-9e23e2756513",
        "value": "s-d-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:34+00:00",
        "timestamp": "1774019014",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2d6b031-8c83-4ea9-8e2b-afdad15cd7cb",
        "value": "s-t-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:34+00:00",
        "timestamp": "1774019014",
        "to_ids": true,
        "type": "domain",
        "uuid": "356685ff-575f-4290-92be-629c9fc95395",
        "value": "s-wap-u-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:34+00:00",
        "timestamp": "1774019014",
        "to_ids": true,
        "type": "domain",
        "uuid": "49216aa0-58aa-4f79-9973-573a537162d2",
        "value": "s-web-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:34+00:00",
        "timestamp": "1774019014",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8ef2428-6293-4c52-a485-b4a3de4abf38",
        "value": "s0.web-cn-i-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:35+00:00",
        "timestamp": "1774019015",
        "to_ids": true,
        "type": "domain",
        "uuid": "f07b4a1d-5a18-430d-b17e-aa470cf415cc",
        "value": "sbn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:35+00:00",
        "timestamp": "1774019015",
        "to_ids": true,
        "type": "domain",
        "uuid": "79579682-78a4-40c3-9208-122950155c5b",
        "value": "sec-web-jp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:35+00:00",
        "timestamp": "1774019015",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9d747eb-8bb9-4735-9edd-5b45cceb5c87",
        "value": "service-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:35+00:00",
        "timestamp": "1774019015",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9e0ade7-c5b8-4888-823f-8f25876f8165",
        "value": "set-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:35+00:00",
        "timestamp": "1774019015",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6f87bdd-401a-4628-bf58-ef330118f720",
        "value": "sfk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:35+00:00",
        "timestamp": "1774019015",
        "to_ids": true,
        "type": "domain",
        "uuid": "82a7c8ec-a1f5-4d6d-a26a-edd906a95dc2",
        "value": "sg-data-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:35+00:00",
        "timestamp": "1774019016",
        "to_ids": true,
        "type": "domain",
        "uuid": "763db995-b74c-4140-ade9-ee650d2f37e0",
        "value": "shift-web-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:36+00:00",
        "timestamp": "1774019016",
        "to_ids": true,
        "type": "domain",
        "uuid": "aab293e2-f2e4-4760-8f72-1d236c6b5bf3",
        "value": "site-app-msg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:36+00:00",
        "timestamp": "1774019016",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5e25fc8-dd32-4694-bca6-de4469337b45",
        "value": "site-chat-pro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:36+00:00",
        "timestamp": "1774019016",
        "to_ids": true,
        "type": "domain",
        "uuid": "04279e8b-0e60-4ba3-bea1-26f0ffa46c1a",
        "value": "siteapp-hk-net-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:36+00:00",
        "timestamp": "1774019016",
        "to_ids": true,
        "type": "domain",
        "uuid": "e257d459-7ca6-4980-a478-a4fe646af642",
        "value": "siteapp-net-pro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:36+00:00",
        "timestamp": "1774019016",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dba53fe-fccd-48cd-bf95-101df9c1e1f6",
        "value": "siteweb-cn-live-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:36+00:00",
        "timestamp": "1774019016",
        "to_ids": true,
        "type": "domain",
        "uuid": "686d3825-9534-4e32-bf6d-10336eab8626",
        "value": "siteweb-live-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:36+00:00",
        "timestamp": "1774019017",
        "to_ids": true,
        "type": "domain",
        "uuid": "87264fb9-e9cc-49e4-a62d-eddfaec4a239",
        "value": "skl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:37+00:00",
        "timestamp": "1774019017",
        "to_ids": true,
        "type": "domain",
        "uuid": "78821de1-13de-4dcd-ba8d-b6253cc60ff9",
        "value": "skv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:37+00:00",
        "timestamp": "1774019017",
        "to_ids": true,
        "type": "domain",
        "uuid": "26cb9f9d-c7a2-4050-9e7e-01bad1ce0c6c",
        "value": "slt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:37+00:00",
        "timestamp": "1774019017",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8cc78f1-c5d1-4d96-8db5-c384d537120d",
        "value": "snk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:37+00:00",
        "timestamp": "1774019017",
        "to_ids": true,
        "type": "domain",
        "uuid": "78ae3457-b737-4738-8c68-cd1fa0d37500",
        "value": "spt-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:37+00:00",
        "timestamp": "1774019017",
        "to_ids": true,
        "type": "domain",
        "uuid": "887b9ddc-7da4-4f56-8449-d2259a1c2869",
        "value": "spt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:37+00:00",
        "timestamp": "1774019017",
        "to_ids": true,
        "type": "domain",
        "uuid": "c85f2f50-6baa-4e68-99aa-f7d2b2d9eee9",
        "value": "srb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:37+00:00",
        "timestamp": "1774019018",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e0dc329-1d31-40bf-817f-758fda048400",
        "value": "sto-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:38+00:00",
        "timestamp": "1774019018",
        "to_ids": true,
        "type": "domain",
        "uuid": "18d51188-8f6d-48dd-b18e-42d4da5a47fe",
        "value": "stu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:38+00:00",
        "timestamp": "1774019018",
        "to_ids": true,
        "type": "domain",
        "uuid": "6545c998-4284-426a-842b-f0013366c630",
        "value": "sv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:38+00:00",
        "timestamp": "1774019018",
        "to_ids": true,
        "type": "domain",
        "uuid": "3335da9f-4f7b-447b-9b2f-357bafd9dd51",
        "value": "svkhl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:38+00:00",
        "timestamp": "1774019018",
        "to_ids": true,
        "type": "domain",
        "uuid": "d439e331-665d-4a71-8d87-7c4bd5fbee74",
        "value": "svm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:38+00:00",
        "timestamp": "1774019018",
        "to_ids": true,
        "type": "domain",
        "uuid": "a592c23f-9e0f-40a7-b352-7946ab9cdc35",
        "value": "svm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:38+00:00",
        "timestamp": "1774019018",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d32815d-17c1-4b28-a380-a4780603a172",
        "value": "svx-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:39+00:00",
        "timestamp": "1774019019",
        "to_ids": true,
        "type": "domain",
        "uuid": "981aef32-21ee-489b-aeff-28ae5fadc07e",
        "value": "svx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:39+00:00",
        "timestamp": "1774019019",
        "to_ids": true,
        "type": "domain",
        "uuid": "f85adb1f-7a16-47e5-9497-5d899f48ea78",
        "value": "sxd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:39+00:00",
        "timestamp": "1774019019",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8fb4c0e-320d-4fb5-9443-4c8e5085053b",
        "value": "sxl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:39+00:00",
        "timestamp": "1774019019",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf686824-f037-4ec7-8a26-ec1c060588b9",
        "value": "sxp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:39+00:00",
        "timestamp": "1774019019",
        "to_ids": true,
        "type": "domain",
        "uuid": "58566add-7c14-4d6c-887e-48fd9f287a87",
        "value": "sync-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:39+00:00",
        "timestamp": "1774019019",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b76a7b7-d0ae-482e-adc3-5b878369bcdc",
        "value": "sync-web-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:39+00:00",
        "timestamp": "1774019020",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2044518-ec66-437d-85b5-3f6961816ec8",
        "value": "syt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:40+00:00",
        "timestamp": "1774019020",
        "to_ids": true,
        "type": "domain",
        "uuid": "496e5d94-4eb5-483b-a47b-01436c3b3a2b",
        "value": "szk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:40+00:00",
        "timestamp": "1774019020",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a0662c0-c582-4df2-9c99-06fbc1a1fa49",
        "value": "t-a-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:40+00:00",
        "timestamp": "1774019020",
        "to_ids": true,
        "type": "domain",
        "uuid": "655faf3b-2d64-4a9f-90f6-5649fd883646",
        "value": "t-e-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:40+00:00",
        "timestamp": "1774019020",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e5f6d63-060d-4b67-9265-010e0a43ded4",
        "value": "t-s-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:40+00:00",
        "timestamp": "1774019020",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2161071-10ed-4d1d-9155-0c0bbed4ff81",
        "value": "t-wap-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:40+00:00",
        "timestamp": "1774019020",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d6c73ea-36c6-44ae-9a94-6137117c22b8",
        "value": "tac-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:40+00:00",
        "timestamp": "1774019021",
        "to_ids": true,
        "type": "domain",
        "uuid": "45f5f9e7-9dd4-4e8d-b8ba-bb4462ba1f7c",
        "value": "tdp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:41+00:00",
        "timestamp": "1774019021",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9e43683-4064-4ba5-a1da-88b2357906a3",
        "value": "tgdhl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:41+00:00",
        "timestamp": "1774019021",
        "to_ids": true,
        "type": "domain",
        "uuid": "28d7b234-390b-44f2-9565-47045122620d",
        "value": "tgj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:41+00:00",
        "timestamp": "1774019021",
        "to_ids": true,
        "type": "domain",
        "uuid": "685a63aa-bd4c-4a0c-aef9-0de999b829b6",
        "value": "tjd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:41+00:00",
        "timestamp": "1774019021",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e2db02c-2547-4234-8a01-0f9119301c23",
        "value": "tkg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:41+00:00",
        "timestamp": "1774019021",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d1febb8-56c3-4f4b-9aef-6571d2044b60",
        "value": "tkq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:41+00:00",
        "timestamp": "1774019022",
        "to_ids": true,
        "type": "domain",
        "uuid": "567adebe-c1d8-44bd-ba2a-e6f509852143",
        "value": "tld-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:42+00:00",
        "timestamp": "1774019022",
        "to_ids": true,
        "type": "domain",
        "uuid": "1287bddd-68bb-47f2-a0d5-414ebf09bf70",
        "value": "tpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:42+00:00",
        "timestamp": "1774019022",
        "to_ids": true,
        "type": "domain",
        "uuid": "7eb4b79b-9061-4b2b-bda0-f569a3bee912",
        "value": "tpu-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:42+00:00",
        "timestamp": "1774019022",
        "to_ids": true,
        "type": "domain",
        "uuid": "725a5173-62b3-47fa-8d27-46af121fa6d7",
        "value": "tqb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:42+00:00",
        "timestamp": "1774019022",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b2c4163-c97c-4819-b2d9-d8d12efb5416",
        "value": "tqd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:42+00:00",
        "timestamp": "1774019022",
        "to_ids": true,
        "type": "domain",
        "uuid": "a189ff7e-58be-48d1-a7c3-873cfab1b718",
        "value": "tqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:42+00:00",
        "timestamp": "1774019022",
        "to_ids": true,
        "type": "domain",
        "uuid": "be7ac9f4-367c-4e27-ad22-7e1748ebecde",
        "value": "tqu-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:43+00:00",
        "timestamp": "1774019023",
        "to_ids": true,
        "type": "domain",
        "uuid": "787e057d-3004-42da-b331-40e38612d1a0",
        "value": "tqu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:43+00:00",
        "timestamp": "1774019023",
        "to_ids": true,
        "type": "domain",
        "uuid": "644a221f-100c-4c70-bda5-0cd57cc669b4",
        "value": "tqv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:43+00:00",
        "timestamp": "1774019023",
        "to_ids": true,
        "type": "domain",
        "uuid": "55464c0a-0cfd-4134-9175-4a9ca014bf71",
        "value": "tqw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:43+00:00",
        "timestamp": "1774019023",
        "to_ids": true,
        "type": "domain",
        "uuid": "39d09195-fc46-4991-b088-568a4d703fb5",
        "value": "trv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:43+00:00",
        "timestamp": "1774019023",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9580a3d-cd01-4dad-9c15-2b2d6a39a676",
        "value": "tt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:43+00:00",
        "timestamp": "1774019023",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c8ce693-8651-4fb5-9404-5d1aa3449ddf",
        "value": "tu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:43+00:00",
        "timestamp": "1774019024",
        "to_ids": true,
        "type": "domain",
        "uuid": "1eb53598-76e4-4f7e-9b9b-3e0f0d6fb488",
        "value": "tvd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:44+00:00",
        "timestamp": "1774019024",
        "to_ids": true,
        "type": "domain",
        "uuid": "15128290-3c93-4c30-94d0-d46dd4a46aea",
        "value": "tvs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:44+00:00",
        "timestamp": "1774019024",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce4e4e4b-c9f2-4def-ad0e-eaa8dfe3c43d",
        "value": "tw-com-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:44+00:00",
        "timestamp": "1774019024",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8846c7f-7836-4f0b-aaca-67962898a84c",
        "value": "tw-web-com-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:44+00:00",
        "timestamp": "1774019024",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2176762-a96f-4f4d-9bf0-4f07afb2c024",
        "value": "twn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:44+00:00",
        "timestamp": "1774019024",
        "to_ids": true,
        "type": "domain",
        "uuid": "61589702-e010-4fea-950a-d6b99f91297b",
        "value": "twn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:44+00:00",
        "timestamp": "1774019024",
        "to_ids": true,
        "type": "domain",
        "uuid": "5036b516-8249-45c9-bceb-80fc412c70b2",
        "value": "twy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:44+00:00",
        "timestamp": "1774019025",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cd57a26-d498-4910-a78b-4538dbcb67a5",
        "value": "txb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:45+00:00",
        "timestamp": "1774019025",
        "to_ids": true,
        "type": "domain",
        "uuid": "95b22d28-d20a-4c72-91db-ef40e2ee0fe9",
        "value": "tzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:45+00:00",
        "timestamp": "1774019025",
        "to_ids": true,
        "type": "domain",
        "uuid": "fabd066a-1e9a-42be-afac-d0f7ce08e7f0",
        "value": "tzx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:45+00:00",
        "timestamp": "1774019025",
        "to_ids": true,
        "type": "domain",
        "uuid": "03e6fdbe-f965-4e77-9ec0-8ec6ca95f48d",
        "value": "u-c-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:45+00:00",
        "timestamp": "1774019025",
        "to_ids": true,
        "type": "domain",
        "uuid": "cce403c1-5841-4fa4-a52c-729bf3ef796a",
        "value": "u-e-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:45+00:00",
        "timestamp": "1774019025",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dcf0d4c-697e-4788-9933-82b4b86f55a8",
        "value": "u-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:45+00:00",
        "timestamp": "1774019026",
        "to_ids": true,
        "type": "domain",
        "uuid": "074d2b06-d565-48e9-a47e-759face68337",
        "value": "u-v-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:46+00:00",
        "timestamp": "1774019026",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f133a96-2be2-44c0-91a2-44afa1b05bfc",
        "value": "u-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:46+00:00",
        "timestamp": "1774019026",
        "to_ids": true,
        "type": "domain",
        "uuid": "618af5d2-8b44-4444-8ff7-05fb099dd400",
        "value": "u-web-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:46+00:00",
        "timestamp": "1774019026",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9fc4385-8d79-4f22-8dee-7d630b469267",
        "value": "u-y-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:46+00:00",
        "timestamp": "1774019026",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cbabe45-ab19-4332-9e99-b84b5ca5a137",
        "value": "u-z-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:46+00:00",
        "timestamp": "1774019026",
        "to_ids": true,
        "type": "domain",
        "uuid": "737aed65-51e5-49ab-8cb2-afbd133d594b",
        "value": "u1.app-web-eu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:46+00:00",
        "timestamp": "1774019026",
        "to_ids": true,
        "type": "domain",
        "uuid": "902657df-52c6-44ab-adcf-9134245ebffd",
        "value": "uf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:46+00:00",
        "timestamp": "1774019027",
        "to_ids": true,
        "type": "domain",
        "uuid": "efc20f8a-8076-4223-8255-579224563f7e",
        "value": "ufz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:47+00:00",
        "timestamp": "1774019027",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbb73901-6a7f-4cc5-9cb4-1044618e0fbf",
        "value": "uhn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:47+00:00",
        "timestamp": "1774019027",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c1a572c-beeb-4d1f-8d3d-2df64aeaad03",
        "value": "ujk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:47+00:00",
        "timestamp": "1774019027",
        "to_ids": true,
        "type": "domain",
        "uuid": "64d505e6-2920-4139-8e8c-0dd06321617e",
        "value": "uk-pro-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:47+00:00",
        "timestamp": "1774019027",
        "to_ids": true,
        "type": "domain",
        "uuid": "26132051-1a5a-4d06-a997-1c9a6d203621",
        "value": "ulx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:47+00:00",
        "timestamp": "1774019027",
        "to_ids": true,
        "type": "domain",
        "uuid": "d50158f8-5832-4a07-af62-a9d064c5213e",
        "value": "uml-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:47+00:00",
        "timestamp": "1774019027",
        "to_ids": true,
        "type": "domain",
        "uuid": "a67fae4f-fc4b-4d2a-8c52-6e7e58c06870",
        "value": "urv-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:48+00:00",
        "timestamp": "1774019028",
        "to_ids": true,
        "type": "domain",
        "uuid": "75efd5bb-28b9-4e09-8178-8c415ac6f9b8",
        "value": "urv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:48+00:00",
        "timestamp": "1774019028",
        "to_ids": true,
        "type": "domain",
        "uuid": "845093b8-d38a-4aad-af31-4e9810e0786f",
        "value": "us-info-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:48+00:00",
        "timestamp": "1774019028",
        "to_ids": true,
        "type": "domain",
        "uuid": "209bae01-b00e-4ba7-bc1b-f40b8d4ee56f",
        "value": "us-web-info-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:48+00:00",
        "timestamp": "1774019028",
        "to_ids": true,
        "type": "domain",
        "uuid": "bae223fa-4510-4748-98a8-e54544e1f185",
        "value": "utl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:48+00:00",
        "timestamp": "1774019028",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5476e7e-112e-4031-81c0-8a7bc1488c23",
        "value": "uvb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:48+00:00",
        "timestamp": "1774019028",
        "to_ids": true,
        "type": "domain",
        "uuid": "34170214-31ca-465d-8412-a4bf55578cc4",
        "value": "uvw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:49+00:00",
        "timestamp": "1774019029",
        "to_ids": true,
        "type": "domain",
        "uuid": "46916965-65d2-4a8d-8924-94b6881be0ff",
        "value": "uvwx.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:49+00:00",
        "timestamp": "1774019029",
        "to_ids": true,
        "type": "domain",
        "uuid": "baab7fae-db2d-474a-80b6-f2cb9ad0d236",
        "value": "uxmhl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:49+00:00",
        "timestamp": "1774019029",
        "to_ids": true,
        "type": "domain",
        "uuid": "de41e45a-6e16-4bd9-9ebf-1759eac59e83",
        "value": "uxo-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:49+00:00",
        "timestamp": "1774019029",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f543ef5-687b-4a26-ae94-e34f07102155",
        "value": "uxo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:49+00:00",
        "timestamp": "1774019029",
        "to_ids": true,
        "type": "domain",
        "uuid": "99b4e3cb-f665-404d-9327-e354949ad42c",
        "value": "uxz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:49+00:00",
        "timestamp": "1774019029",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dc992ec-c181-4647-8e2a-46c727ea85a9",
        "value": "uxz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:49+00:00",
        "timestamp": "1774019030",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc33a404-8e97-43df-8be2-337b4f141e4f",
        "value": "uzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:50+00:00",
        "timestamp": "1774019030",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0dbeb7c-0871-423a-9f28-ddd42e675181",
        "value": "v-a-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:50+00:00",
        "timestamp": "1774019030",
        "to_ids": true,
        "type": "domain",
        "uuid": "53e6d7a1-cad7-4c5f-8584-b36a6fba8988",
        "value": "v-b-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:50+00:00",
        "timestamp": "1774019030",
        "to_ids": true,
        "type": "domain",
        "uuid": "63c7b7dd-917b-42de-a651-c7d416680610",
        "value": "v-d-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:50+00:00",
        "timestamp": "1774019030",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea9e727a-b081-4fae-b75e-92bc1b5da848",
        "value": "v-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:50+00:00",
        "timestamp": "1774019030",
        "to_ids": true,
        "type": "domain",
        "uuid": "77ae3635-c1fb-41de-901e-e17db90f6790",
        "value": "v-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:50+00:00",
        "timestamp": "1774019030",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a285cc6-d24f-4b16-9aa0-e7e41597a393",
        "value": "v-i-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:50+00:00",
        "timestamp": "1774019031",
        "to_ids": true,
        "type": "domain",
        "uuid": "71fd3105-b01a-4669-89be-179e54554de0",
        "value": "v-u-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:51+00:00",
        "timestamp": "1774019031",
        "to_ids": true,
        "type": "domain",
        "uuid": "73f5813e-85da-45d6-80c6-c504db35369a",
        "value": "va-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:51+00:00",
        "timestamp": "1774019031",
        "to_ids": true,
        "type": "domain",
        "uuid": "981bbe94-ea12-4079-8d6d-6e9f8904f1cf",
        "value": "vb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:51+00:00",
        "timestamp": "1774019031",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c6280aa-0412-4eed-8075-5f864169879a",
        "value": "vcl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:51+00:00",
        "timestamp": "1774019031",
        "to_ids": true,
        "type": "domain",
        "uuid": "f46ac64c-f050-4273-9bf3-0ea4307379d7",
        "value": "vhd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:51+00:00",
        "timestamp": "1774019031",
        "to_ids": true,
        "type": "domain",
        "uuid": "0528be76-23bc-40b8-898f-5dc183635f86",
        "value": "vj.login-faq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:51+00:00",
        "timestamp": "1774019031",
        "to_ids": true,
        "type": "domain",
        "uuid": "e47a1d52-a56b-4f1a-9b43-342377a0a1e0",
        "value": "vjc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:51+00:00",
        "timestamp": "1774019032",
        "to_ids": true,
        "type": "domain",
        "uuid": "01bff8bb-286b-456b-bcbf-c7676b5221ef",
        "value": "vkg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:52+00:00",
        "timestamp": "1774019032",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb71e4a4-c3f7-4831-9b0a-7d371866452b",
        "value": "vkp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:52+00:00",
        "timestamp": "1774019032",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b51d2d1-6f0a-4915-8626-4b0a31e43303",
        "value": "vla-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:52+00:00",
        "timestamp": "1774019032",
        "to_ids": true,
        "type": "domain",
        "uuid": "c803a222-3458-452b-b83e-723e20af170b",
        "value": "vpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:52+00:00",
        "timestamp": "1774019032",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb6a970a-b904-417c-9772-cbed73adc55d",
        "value": "vqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:52+00:00",
        "timestamp": "1774019032",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed55cff3-cb3b-45e1-97b8-04857bf0b755",
        "value": "vqrhl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:52+00:00",
        "timestamp": "1774019033",
        "to_ids": true,
        "type": "domain",
        "uuid": "0623448d-4874-473b-8752-6ef7f402e648",
        "value": "vrc-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:53+00:00",
        "timestamp": "1774019033",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd700798-ffcc-4ccb-a30a-e61634dbd182",
        "value": "vs.apps-grid-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:53+00:00",
        "timestamp": "1774019033",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fc5839d-4bd0-4862-91dd-7736adb0a9fa",
        "value": "vsm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:53+00:00",
        "timestamp": "1774019033",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6ec8600-146e-4022-8c37-74551bc808d5",
        "value": "vsw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:53+00:00",
        "timestamp": "1774019033",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f0e2142-097d-4ea8-82cc-4ca387b7094a",
        "value": "vsw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:53+00:00",
        "timestamp": "1774019033",
        "to_ids": true,
        "type": "domain",
        "uuid": "345888b7-3351-443a-a3c5-f1211cd8a11e",
        "value": "vtc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:53+00:00",
        "timestamp": "1774019033",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0c32a6c-068e-4e97-98b4-3b59d782a4cd",
        "value": "vub-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:53+00:00",
        "timestamp": "1774019034",
        "to_ids": true,
        "type": "domain",
        "uuid": "212d9b76-1524-4cbb-a40d-ca871c9b3126",
        "value": "vwx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:54+00:00",
        "timestamp": "1774019034",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f475e0b-f8dc-4584-a267-6ed647228ac3",
        "value": "vxf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:54+00:00",
        "timestamp": "1774019034",
        "to_ids": true,
        "type": "domain",
        "uuid": "17441f34-fea2-40a8-a614-22185aded3a0",
        "value": "vyb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:54+00:00",
        "timestamp": "1774019034",
        "to_ids": true,
        "type": "domain",
        "uuid": "22fa31d0-8641-47ca-8b23-0ebfdb4279c4",
        "value": "vyp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:54+00:00",
        "timestamp": "1774019034",
        "to_ids": true,
        "type": "domain",
        "uuid": "08ac0675-c579-4f81-9fe2-b0ffb85edbe7",
        "value": "vyp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:54+00:00",
        "timestamp": "1774019034",
        "to_ids": true,
        "type": "domain",
        "uuid": "0066d928-642c-4845-a444-05f8607a3ce9",
        "value": "vzk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:54+00:00",
        "timestamp": "1774019034",
        "to_ids": true,
        "type": "domain",
        "uuid": "6efd3b66-5047-4af8-92d5-b828302927ba",
        "value": "w-d-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:54+00:00",
        "timestamp": "1774019035",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc4033b3-ab6c-43fd-b9df-3663a053c297",
        "value": "w-g-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:55+00:00",
        "timestamp": "1774019035",
        "to_ids": true,
        "type": "domain",
        "uuid": "8757d4a8-38bb-4019-af8c-ca0e46773145",
        "value": "w-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:55+00:00",
        "timestamp": "1774019035",
        "to_ids": true,
        "type": "domain",
        "uuid": "721c1695-1fd7-46b2-85f1-2964dd9c06ef",
        "value": "w-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:55+00:00",
        "timestamp": "1774019035",
        "to_ids": true,
        "type": "domain",
        "uuid": "50f84ad7-2793-4ab0-849f-48733763ced1",
        "value": "w-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:55+00:00",
        "timestamp": "1774019035",
        "to_ids": true,
        "type": "domain",
        "uuid": "804b4657-73f8-463c-859d-7b4b4b5a0584",
        "value": "w-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:55+00:00",
        "timestamp": "1774019035",
        "to_ids": true,
        "type": "domain",
        "uuid": "57769473-4c0f-40cc-a1f5-deaba5b7e64f",
        "value": "w-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:55+00:00",
        "timestamp": "1774019035",
        "to_ids": true,
        "type": "domain",
        "uuid": "34d3fd0e-0eff-4637-a216-b80cbdbfc7b7",
        "value": "w-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:55+00:00",
        "timestamp": "1774019036",
        "to_ids": true,
        "type": "domain",
        "uuid": "edb0db33-9df2-40c8-8534-2e09ec253ef1",
        "value": "w-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:56+00:00",
        "timestamp": "1774019036",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4e73051-48f1-49e0-bbc7-d80758dd4077",
        "value": "w-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:56+00:00",
        "timestamp": "1774019036",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3d5a556-08bf-4574-b27a-17e80599e2f9",
        "value": "w-w-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:56+00:00",
        "timestamp": "1774019036",
        "to_ids": true,
        "type": "domain",
        "uuid": "f685ab35-836f-434d-a1a4-923ad4bcb367",
        "value": "w-web-x-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:56+00:00",
        "timestamp": "1774019036",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dd597cb-6664-4466-ab27-07adeb3496ee",
        "value": "w-x-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:56+00:00",
        "timestamp": "1774019036",
        "to_ids": true,
        "type": "domain",
        "uuid": "17a17a67-fde2-4d29-a544-d230465b1217",
        "value": "wan-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:56+00:00",
        "timestamp": "1774019037",
        "to_ids": true,
        "type": "domain",
        "uuid": "468a23e9-c8f3-4da9-817b-a1ad03bf7353",
        "value": "wap-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:57+00:00",
        "timestamp": "1774019037",
        "to_ids": true,
        "type": "domain",
        "uuid": "a980ad61-db84-4625-920a-f9a2965acb9a",
        "value": "wap-bkd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:57+00:00",
        "timestamp": "1774019037",
        "to_ids": true,
        "type": "domain",
        "uuid": "60588cb5-84ad-4529-bf2b-74457d72734d",
        "value": "wap-bqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:57+00:00",
        "timestamp": "1774019037",
        "to_ids": true,
        "type": "domain",
        "uuid": "385073b4-bd25-4873-ae3a-72c31328f9e2",
        "value": "wap-btm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:57+00:00",
        "timestamp": "1774019037",
        "to_ids": true,
        "type": "domain",
        "uuid": "1db2f285-742c-4cf0-97b9-a3e1af4fd397",
        "value": "wap-btr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:57+00:00",
        "timestamp": "1774019037",
        "to_ids": true,
        "type": "domain",
        "uuid": "86f15956-11c4-4fab-90e4-b112b8af159d",
        "value": "wap-bvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:57+00:00",
        "timestamp": "1774019038",
        "to_ids": true,
        "type": "domain",
        "uuid": "45da97b4-8dde-499b-9f5e-77a9502f46b0",
        "value": "wap-chat-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:58+00:00",
        "timestamp": "1774019038",
        "to_ids": true,
        "type": "domain",
        "uuid": "9aa3b19f-0be7-427f-8cf9-ff547f6daebd",
        "value": "wap-cpw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:58+00:00",
        "timestamp": "1774019038",
        "to_ids": true,
        "type": "domain",
        "uuid": "28727a2a-3167-4dfa-9814-cdc4bc7435cf",
        "value": "wap-csl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:58+00:00",
        "timestamp": "1774019038",
        "to_ids": true,
        "type": "domain",
        "uuid": "444f30e6-87d6-45b7-898c-40c5f5b6d05d",
        "value": "wap-dax-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:58+00:00",
        "timestamp": "1774019038",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f5d6b5a-d6a9-4bfa-9fba-4a92fbddd484",
        "value": "wap-dgw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:58+00:00",
        "timestamp": "1774019038",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9a6adf4-d8ee-4d35-bb03-3c5051c2e3ea",
        "value": "wap-djt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:58+00:00",
        "timestamp": "1774019039",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c66112f-6bac-470d-b3d4-be8d5bba62d2",
        "value": "wap-dxp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:59+00:00",
        "timestamp": "1774019039",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e32df8c-ed88-4746-bc7f-22823b034af4",
        "value": "wap-eha-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:59+00:00",
        "timestamp": "1774019039",
        "to_ids": true,
        "type": "domain",
        "uuid": "55fcd1c4-ef94-4e5c-9398-9efe33dd20c3",
        "value": "wap-ekd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:59+00:00",
        "timestamp": "1774019039",
        "to_ids": true,
        "type": "domain",
        "uuid": "204156da-57d8-4bb5-878f-c9608ffaccc6",
        "value": "wap-fnr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:59+00:00",
        "timestamp": "1774019039",
        "to_ids": true,
        "type": "domain",
        "uuid": "c22e6ba6-ad1b-4ed0-81b7-599c4eefe891",
        "value": "wap-fse-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:59+00:00",
        "timestamp": "1774019039",
        "to_ids": true,
        "type": "domain",
        "uuid": "93db8aa6-c10f-414f-835b-9112f5acf21f",
        "value": "wap-fwt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:59+00:00",
        "timestamp": "1774019039",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d563c9a-8547-4940-b719-686d518c8cc7",
        "value": "wap-fyz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:03:59+00:00",
        "timestamp": "1774019040",
        "to_ids": true,
        "type": "domain",
        "uuid": "05665995-9830-415c-ab81-7f4266ef73a2",
        "value": "wap-gdp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:00+00:00",
        "timestamp": "1774019040",
        "to_ids": true,
        "type": "domain",
        "uuid": "062d44c8-c530-41f7-a54e-e2dae13fe39a",
        "value": "wap-gfr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:00+00:00",
        "timestamp": "1774019040",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2ac0255-179e-419d-9faf-21d55aff18f1",
        "value": "wap-gkh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:00+00:00",
        "timestamp": "1774019040",
        "to_ids": true,
        "type": "domain",
        "uuid": "36d206fd-dac6-4d02-8d12-f9512e2ae7e0",
        "value": "wap-gnz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:00+00:00",
        "timestamp": "1774019040",
        "to_ids": true,
        "type": "domain",
        "uuid": "dee2dbfb-ba58-4b38-bee7-46c12cbb4610",
        "value": "wap-gsw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:00+00:00",
        "timestamp": "1774019040",
        "to_ids": true,
        "type": "domain",
        "uuid": "952298a5-ca6a-4af9-ae3d-cafe0a1a4608",
        "value": "wap-hpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:00+00:00",
        "timestamp": "1774019040",
        "to_ids": true,
        "type": "domain",
        "uuid": "f31c19a3-89f7-4db5-8bcb-e3e38be7e4eb",
        "value": "wap-hrp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:00+00:00",
        "timestamp": "1774019041",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e82d7c9-0951-4e73-8691-39384fbabda6",
        "value": "wap-hvs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:01+00:00",
        "timestamp": "1774019041",
        "to_ids": true,
        "type": "domain",
        "uuid": "420d93a2-517e-4aaf-8459-370e7fb538d9",
        "value": "wap-iax-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:01+00:00",
        "timestamp": "1774019041",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d06d26c-14b0-45cd-90d8-a1549d4bb90f",
        "value": "wap-im-link-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:01+00:00",
        "timestamp": "1774019041",
        "to_ids": true,
        "type": "domain",
        "uuid": "80a647c6-9a5b-4891-92dd-1843e40de5b9",
        "value": "wap-jka-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:01+00:00",
        "timestamp": "1774019041",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c9c5d26-8b38-4cb0-8669-bea13a982819",
        "value": "wap-jls-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:01+00:00",
        "timestamp": "1774019041",
        "to_ids": true,
        "type": "domain",
        "uuid": "de5d685b-353b-4357-80b5-89abeffaa120",
        "value": "wap-jow-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:01+00:00",
        "timestamp": "1774019041",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f3db300-8385-4823-8799-e8dd842d0ab7",
        "value": "wap-jzw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:01+00:00",
        "timestamp": "1774019042",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1d82871-0722-4a1f-863c-574b077d8e11",
        "value": "wap-kia-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:02+00:00",
        "timestamp": "1774019042",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b3e54c9-f9a2-4d24-93c2-c42c4878ce53",
        "value": "wap-kls-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:02+00:00",
        "timestamp": "1774019042",
        "to_ids": true,
        "type": "domain",
        "uuid": "470d96fe-2182-4238-a9fd-0bf7f4ac8ce3",
        "value": "wap-kqy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:02+00:00",
        "timestamp": "1774019042",
        "to_ids": true,
        "type": "domain",
        "uuid": "40b4a228-e0ce-4fd6-9cb9-88c157483632",
        "value": "wap-kuo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:02+00:00",
        "timestamp": "1774019042",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fe140a7-ff69-4f0d-8472-04e3c65bc09e",
        "value": "wap-lcz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:02+00:00",
        "timestamp": "1774019042",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8a0210e-63c9-4ed8-8d73-2e85d92206ee",
        "value": "wap-lgp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:02+00:00",
        "timestamp": "1774019043",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce92c576-3214-4178-98ef-c1b0ce5e7f90",
        "value": "wap-lqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:03+00:00",
        "timestamp": "1774019043",
        "to_ids": true,
        "type": "domain",
        "uuid": "406c58a1-9d68-48b3-b7f5-9d8bd97c43e5",
        "value": "wap-lwb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:03+00:00",
        "timestamp": "1774019043",
        "to_ids": true,
        "type": "domain",
        "uuid": "4121f05a-4df0-4d53-8c42-4fff514179f2",
        "value": "wap-mfd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:03+00:00",
        "timestamp": "1774019043",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eaa4b9a-9554-44ed-b9d5-069ba372cd74",
        "value": "wap-mhs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:03+00:00",
        "timestamp": "1774019043",
        "to_ids": true,
        "type": "domain",
        "uuid": "71170256-9585-4b48-b4f8-1f55ca628b19",
        "value": "wap-msu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:03+00:00",
        "timestamp": "1774019043",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c6f2bb7-3690-4df8-b9d3-5a946c7fa130",
        "value": "wap-njy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:03+00:00",
        "timestamp": "1774019043",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff35fe48-bcf6-4ee3-9e6b-f29b6eddc55b",
        "value": "wap-nue-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:03+00:00",
        "timestamp": "1774019044",
        "to_ids": true,
        "type": "domain",
        "uuid": "df138aba-08ce-47bf-9aeb-ee0a25045c89",
        "value": "wap-nuh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:04+00:00",
        "timestamp": "1774019044",
        "to_ids": true,
        "type": "domain",
        "uuid": "37a9e760-bbf6-4f25-b668-fd73f4e8ad61",
        "value": "wap-oaq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:04+00:00",
        "timestamp": "1774019044",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2411119-8f4c-48a6-95a6-9608f0fcb043",
        "value": "wap-online-net-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:04+00:00",
        "timestamp": "1774019044",
        "to_ids": true,
        "type": "domain",
        "uuid": "e833b9c4-2ee5-40ce-abfc-3a0d7742b85f",
        "value": "wap-online-tw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:04+00:00",
        "timestamp": "1774019044",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb560a70-33c4-4363-86da-7b349b0d718a",
        "value": "wap-oxf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:04+00:00",
        "timestamp": "1774019044",
        "to_ids": true,
        "type": "domain",
        "uuid": "64f3f27a-ce7b-414e-bb97-606f230ed467",
        "value": "wap-pro-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:04+00:00",
        "timestamp": "1774019044",
        "to_ids": true,
        "type": "domain",
        "uuid": "500217e2-9ec2-4ac9-b225-c0a5339ffada",
        "value": "wap-qoz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:04+00:00",
        "timestamp": "1774019045",
        "to_ids": true,
        "type": "domain",
        "uuid": "211de018-eba4-4ab9-8dc5-d64d1778b8fd",
        "value": "wap-qte-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:05+00:00",
        "timestamp": "1774019045",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff13f016-f772-43a7-a926-02a4691e5e85",
        "value": "wap-rja-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:05+00:00",
        "timestamp": "1774019045",
        "to_ids": true,
        "type": "domain",
        "uuid": "4117758e-a18c-4cb5-bc9e-1288935542df",
        "value": "wap-rku-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:05+00:00",
        "timestamp": "1774019045",
        "to_ids": true,
        "type": "domain",
        "uuid": "618eb3fc-d70f-405c-84b0-4fb31cd57bc8",
        "value": "wap-rwx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:05+00:00",
        "timestamp": "1774019045",
        "to_ids": true,
        "type": "domain",
        "uuid": "c03639fe-4dd2-45c4-b9c3-7dcaca83dbe4",
        "value": "wap-ryf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:05+00:00",
        "timestamp": "1774019045",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eba9ce1-9fb7-4690-ac10-ee7f21ab2ed6",
        "value": "wap-sjl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:05+00:00",
        "timestamp": "1774019045",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8d4e00f-0531-407d-838a-6faa6121c978",
        "value": "wap-sjx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:05+00:00",
        "timestamp": "1774019046",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6cbe17d-4bfd-4705-8bb7-6d3962e048a4",
        "value": "wap-smh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:06+00:00",
        "timestamp": "1774019046",
        "to_ids": true,
        "type": "domain",
        "uuid": "c957a574-d093-4a2b-9598-2b1497e8f0e2",
        "value": "wap-tac-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:06+00:00",
        "timestamp": "1774019046",
        "to_ids": true,
        "type": "domain",
        "uuid": "a82ea547-20ae-4cb6-9057-e01bcdab5ed3",
        "value": "wap-tjq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:06+00:00",
        "timestamp": "1774019046",
        "to_ids": true,
        "type": "domain",
        "uuid": "caac86b6-244c-483a-81b7-838e3af26b2e",
        "value": "wap-tpz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:06+00:00",
        "timestamp": "1774019046",
        "to_ids": true,
        "type": "domain",
        "uuid": "05fbf20e-1f94-4d86-92c3-d39f9f9e5772",
        "value": "wap-uhn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:06+00:00",
        "timestamp": "1774019046",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a0bb5b1-f93e-4a0d-8c8d-fd7739e4acc0",
        "value": "wap-uro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:06+00:00",
        "timestamp": "1774019046",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ac1ace7-bc81-429f-850a-5a35219e110c",
        "value": "wap-vce-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:07+00:00",
        "timestamp": "1774019047",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c4ca971-92b0-4cf0-a904-76750eb85d5e",
        "value": "wap-vcl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:07+00:00",
        "timestamp": "1774019047",
        "to_ids": true,
        "type": "domain",
        "uuid": "00313f5f-9895-4cd7-82a3-e47bee311cc8",
        "value": "wap-vkt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:07+00:00",
        "timestamp": "1774019047",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d583f24-e6e3-45f2-8392-1ebf6926aa09",
        "value": "wap-vnm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:07+00:00",
        "timestamp": "1774019047",
        "to_ids": true,
        "type": "domain",
        "uuid": "edb85d88-0de3-4e3a-8b1e-a643f868392d",
        "value": "wap-vyu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:07+00:00",
        "timestamp": "1774019047",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3a56526-4fe1-49e1-ae21-100b70bc5349",
        "value": "wap-wdo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:07+00:00",
        "timestamp": "1774019047",
        "to_ids": true,
        "type": "domain",
        "uuid": "e37e5711-00ff-4510-9158-946e64c8e81f",
        "value": "wap-web-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:07+00:00",
        "timestamp": "1774019048",
        "to_ids": true,
        "type": "domain",
        "uuid": "458583b0-dd4e-4902-aa63-53d640ecea97",
        "value": "wap-wpk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:08+00:00",
        "timestamp": "1774019048",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2209f51-157d-4d49-9955-c32c1ffd1d16",
        "value": "wap-wto-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:08+00:00",
        "timestamp": "1774019048",
        "to_ids": true,
        "type": "domain",
        "uuid": "8852521a-4cd5-478f-8046-3bbe5a08eaf5",
        "value": "wap-xgk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:08+00:00",
        "timestamp": "1774019048",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f803530-38ba-4590-b822-00a6c965c6f5",
        "value": "wap-xmd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:08+00:00",
        "timestamp": "1774019048",
        "to_ids": true,
        "type": "domain",
        "uuid": "c60e23b6-f3c7-4b8a-9446-b31c9f6978b3",
        "value": "wap-xra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:08+00:00",
        "timestamp": "1774019048",
        "to_ids": true,
        "type": "domain",
        "uuid": "21ff1a4f-6221-40fe-83c9-aaa7a2d6edbf",
        "value": "wap-yqd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:08+00:00",
        "timestamp": "1774019048",
        "to_ids": true,
        "type": "domain",
        "uuid": "e337fc3a-7887-40a8-93eb-1d7cd51e646f",
        "value": "wap-zcr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:08+00:00",
        "timestamp": "1774019049",
        "to_ids": true,
        "type": "domain",
        "uuid": "4611ace6-fe9a-4838-829f-ac4283dcbd51",
        "value": "wap-zpl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:09+00:00",
        "timestamp": "1774019049",
        "to_ids": true,
        "type": "domain",
        "uuid": "2db5e975-05d7-4c0e-9aa2-e2671a6b85ca",
        "value": "wap-zqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:09+00:00",
        "timestamp": "1774019049",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5599e1e-7f8c-4a07-98ed-2a204da455a0",
        "value": "wap-zsj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:09+00:00",
        "timestamp": "1774019049",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e45a65b-7095-456d-b925-8a2a15bc8482",
        "value": "wap-zvc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:09+00:00",
        "timestamp": "1774019049",
        "to_ids": true,
        "type": "domain",
        "uuid": "d09c6150-f444-42ea-aa5d-b1d6bf9a6737",
        "value": "wapapp-cn-org-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:09+00:00",
        "timestamp": "1774019049",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad26ae02-6135-4bf3-b484-e9d9f46bafc8",
        "value": "wapapp-live-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:09+00:00",
        "timestamp": "1774019049",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b4ca401-4068-4a5c-b16c-57a4dbb8d231",
        "value": "wapchat-net-live-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:09+00:00",
        "timestamp": "1774019050",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4bd2bf4-4b61-41bb-8301-45987fae806b",
        "value": "wapim-live-pro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:10+00:00",
        "timestamp": "1774019050",
        "to_ids": true,
        "type": "domain",
        "uuid": "947be4da-fd1c-4d97-be65-da6e9ecd4a76",
        "value": "wapmsg-cn-pro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:10+00:00",
        "timestamp": "1774019050",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5fd4081-df60-45ed-97d0-a75c5b0ddc78",
        "value": "waponline-pro-hk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:10+00:00",
        "timestamp": "1774019050",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed32c124-228a-42f2-bfca-8c947e41f952",
        "value": "wave-apps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:10+00:00",
        "timestamp": "1774019050",
        "to_ids": true,
        "type": "domain",
        "uuid": "86b4d767-93d2-40e8-96c2-5c0fed2989c9",
        "value": "wdo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:10+00:00",
        "timestamp": "1774019050",
        "to_ids": true,
        "type": "domain",
        "uuid": "f288cf87-6799-4012-966a-294bc634bd79",
        "value": "web-a-gapps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:10+00:00",
        "timestamp": "1774019050",
        "to_ids": true,
        "type": "domain",
        "uuid": "d144699a-fc0d-42a4-8cb5-d6d68526c896",
        "value": "web-app-org-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:11+00:00",
        "timestamp": "1774019051",
        "to_ids": true,
        "type": "domain",
        "uuid": "395c629d-93a1-44cd-b88d-8095d68b3770",
        "value": "web-b-happs-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:11+00:00",
        "timestamp": "1774019051",
        "to_ids": true,
        "type": "domain",
        "uuid": "228e2ef0-b896-4aeb-9a95-67b0d6ddd921",
        "value": "web-bfc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:11+00:00",
        "timestamp": "1774019051",
        "to_ids": true,
        "type": "domain",
        "uuid": "677ba404-4463-4b18-876b-1ce3c1c40847",
        "value": "web-bkd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:11+00:00",
        "timestamp": "1774019051",
        "to_ids": true,
        "type": "domain",
        "uuid": "0356d15b-482e-4106-922c-02b978c9d030",
        "value": "web-br-host-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:11+00:00",
        "timestamp": "1774019052",
        "to_ids": true,
        "type": "domain",
        "uuid": "b24e81d4-7f14-4f04-93ce-a8a1fbd37248",
        "value": "web-bvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:12+00:00",
        "timestamp": "1774019052",
        "to_ids": true,
        "type": "domain",
        "uuid": "67cf49fd-47ad-44b6-9308-9d873848a21d",
        "value": "web-bw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:12+00:00",
        "timestamp": "1774019052",
        "to_ids": true,
        "type": "domain",
        "uuid": "a849ead8-2f22-4661-b715-39f0196fb7a8",
        "value": "web-ca-msg-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:12+00:00",
        "timestamp": "1774019052",
        "to_ids": true,
        "type": "domain",
        "uuid": "4998a61f-8540-4267-b977-95384881cd4a",
        "value": "web-cde-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:12+00:00",
        "timestamp": "1774019052",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0908ec6-fe63-487d-bdc5-9a2397bb8caf",
        "value": "web-cn-a-c-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:12+00:00",
        "timestamp": "1774019052",
        "to_ids": true,
        "type": "domain",
        "uuid": "03ede6e2-bd26-40df-8ffd-6a4497c80c2c",
        "value": "web-cn-b-d-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:12+00:00",
        "timestamp": "1774019052",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cc263e2-2a13-4bb9-9ee8-affd834c5ff2",
        "value": "web-cn-d-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:12+00:00",
        "timestamp": "1774019053",
        "to_ids": true,
        "type": "domain",
        "uuid": "14949bbb-e821-4f0e-a020-a04b5d227e66",
        "value": "web-cn-f-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:13+00:00",
        "timestamp": "1774019053",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cf35f52-686e-4d79-9731-1258c28952b7",
        "value": "web-cn-h-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:13+00:00",
        "timestamp": "1774019053",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e249bde-0e6f-4c00-95ca-8f3e5135a471",
        "value": "web-cn-i-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:13+00:00",
        "timestamp": "1774019053",
        "to_ids": true,
        "type": "domain",
        "uuid": "efdd397a-201e-4b7f-9e86-d36e674d5d4d",
        "value": "web-cn-j-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:13+00:00",
        "timestamp": "1774019053",
        "to_ids": true,
        "type": "domain",
        "uuid": "25a5a714-4c56-4bc5-b54c-e254319f12f0",
        "value": "web-cn-l-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:13+00:00",
        "timestamp": "1774019053",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ae68fa3-e24d-4c4e-a357-51f9c7ed353c",
        "value": "web-cn-m-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:13+00:00",
        "timestamp": "1774019054",
        "to_ids": true,
        "type": "domain",
        "uuid": "26dc9e34-b277-4ee4-8068-a8ecafcb323e",
        "value": "web-cn-n-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:14+00:00",
        "timestamp": "1774019054",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8b746d2-b84b-4fa5-b7bb-0326f60bbc4a",
        "value": "web-cn-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:14+00:00",
        "timestamp": "1774019054",
        "to_ids": true,
        "type": "domain",
        "uuid": "a79e6026-0604-41cd-b692-cec8c36b2dc8",
        "value": "web-cn-p-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:14+00:00",
        "timestamp": "1774019054",
        "to_ids": true,
        "type": "domain",
        "uuid": "b11f775e-edc1-4e4d-b9cf-0ecbd79bb7bd",
        "value": "web-cn-q-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:14+00:00",
        "timestamp": "1774019054",
        "to_ids": true,
        "type": "domain",
        "uuid": "006cafeb-59fa-42af-bb8c-dad21704e0e4",
        "value": "web-cn-s-u-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:14+00:00",
        "timestamp": "1774019054",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ea86e0a-1ad2-46a5-8413-b4ab2fcb40ca",
        "value": "web-cn-u-w-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:14+00:00",
        "timestamp": "1774019054",
        "to_ids": true,
        "type": "domain",
        "uuid": "369cd2da-5520-479d-a3b1-b8fee06b0eec",
        "value": "web-cpw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:14+00:00",
        "timestamp": "1774019055",
        "to_ids": true,
        "type": "domain",
        "uuid": "b85bb72f-21ee-4597-a431-42a345e1f8e1",
        "value": "web-cz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:15+00:00",
        "timestamp": "1774019055",
        "to_ids": true,
        "type": "domain",
        "uuid": "9dfb8b94-9b83-4937-9760-6088c07488c8",
        "value": "web-d-japps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:15+00:00",
        "timestamp": "1774019055",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0792b6d-44ac-48a0-8847-3e0880449c45",
        "value": "web-dcb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:15+00:00",
        "timestamp": "1774019055",
        "to_ids": true,
        "type": "domain",
        "uuid": "fee08304-94b7-4471-b49f-2b05689ae01c",
        "value": "web-drm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:15+00:00",
        "timestamp": "1774019055",
        "to_ids": true,
        "type": "domain",
        "uuid": "7da4eea0-da45-4982-8502-b45e0253f60f",
        "value": "web-dx-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:15+00:00",
        "timestamp": "1774019055",
        "to_ids": true,
        "type": "domain",
        "uuid": "45ec360e-c590-47bd-97b1-5e71528c5509",
        "value": "web-e-kapps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:15+00:00",
        "timestamp": "1774019055",
        "to_ids": true,
        "type": "domain",
        "uuid": "79419020-4e49-49c4-a750-88ea5e9cf6b6",
        "value": "web-eha-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:16+00:00",
        "timestamp": "1774019056",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd7434a8-3013-4349-a9ed-a85fee8c8872",
        "value": "web-es-log-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:16+00:00",
        "timestamp": "1774019056",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d671419-8974-4264-954f-d13ad1d35c03",
        "value": "web-eu-dev-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:16+00:00",
        "timestamp": "1774019056",
        "to_ids": true,
        "type": "domain",
        "uuid": "50f0194e-330d-4246-aaa9-77ddc393a63d",
        "value": "web-f-lapps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:16+00:00",
        "timestamp": "1774019056",
        "to_ids": true,
        "type": "domain",
        "uuid": "837d5431-94d7-4bfc-a2b6-c31655b7d203",
        "value": "web-fr-img-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:16+00:00",
        "timestamp": "1774019056",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee0ed6f5-92f7-4b1b-91fa-1c254c73168d",
        "value": "web-fy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:16+00:00",
        "timestamp": "1774019056",
        "to_ids": true,
        "type": "domain",
        "uuid": "08b83f8e-5cc1-4ef4-a681-94ad081da209",
        "value": "web-fyz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:16+00:00",
        "timestamp": "1774019057",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd108865-9a97-448b-89d5-0028fe159c29",
        "value": "web-fzu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:17+00:00",
        "timestamp": "1774019057",
        "to_ids": true,
        "type": "domain",
        "uuid": "29f8eac6-a5d9-4841-b407-38f2ccb99e61",
        "value": "web-g-mapps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:17+00:00",
        "timestamp": "1774019057",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b96d32a-2753-4a96-8fd6-3d5de12af403",
        "value": "web-grid-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:17+00:00",
        "timestamp": "1774019057",
        "to_ids": true,
        "type": "domain",
        "uuid": "18ae22b7-6910-42eb-93ae-a4e7078290b2",
        "value": "web-gsw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:17+00:00",
        "timestamp": "1774019057",
        "to_ids": true,
        "type": "domain",
        "uuid": "81029597-6320-45fd-bb90-0d14b2928eaa",
        "value": "web-gz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:17+00:00",
        "timestamp": "1774019057",
        "to_ids": true,
        "type": "domain",
        "uuid": "42d36e60-83ec-4f86-afec-f7777c1a5cfb",
        "value": "web-h-napps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:17+00:00",
        "timestamp": "1774019057",
        "to_ids": true,
        "type": "domain",
        "uuid": "1768ae64-f495-4d65-ac7e-8471ed291161",
        "value": "web-hij-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:17+00:00",
        "timestamp": "1774019058",
        "to_ids": true,
        "type": "domain",
        "uuid": "487eb1b8-1d69-43ad-aa3d-bf9766ae7cc6",
        "value": "web-hk-net-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:18+00:00",
        "timestamp": "1774019058",
        "to_ids": true,
        "type": "domain",
        "uuid": "a52080ab-100b-4e0e-9198-b4de11fe3722",
        "value": "web-hq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:18+00:00",
        "timestamp": "1774019058",
        "to_ids": true,
        "type": "domain",
        "uuid": "78aeab46-781a-43b9-8100-e60d70ec1dab",
        "value": "web-hvs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:18+00:00",
        "timestamp": "1774019058",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c57ede8-2126-45e8-ad5d-c4a619ddb7e6",
        "value": "web-i-oapps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:18+00:00",
        "timestamp": "1774019058",
        "to_ids": true,
        "type": "domain",
        "uuid": "420db19e-2c8b-4aa3-a985-7995b333195d",
        "value": "web-id-base-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:18+00:00",
        "timestamp": "1774019058",
        "to_ids": true,
        "type": "domain",
        "uuid": "32257a6f-256c-4314-9169-2a871d44aa35",
        "value": "web-im-pro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:18+00:00",
        "timestamp": "1774019058",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c588cb9-cce7-4f6d-a14d-550fb6ec1b70",
        "value": "web-in-data-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:18+00:00",
        "timestamp": "1774019059",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9863665-b11d-463d-a5e8-cb1ff58c51cf",
        "value": "web-ipb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:19+00:00",
        "timestamp": "1774019059",
        "to_ids": true,
        "type": "domain",
        "uuid": "da6b7e30-2a7d-42c6-a851-dea6d8428739",
        "value": "web-ir-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:19+00:00",
        "timestamp": "1774019059",
        "to_ids": true,
        "type": "domain",
        "uuid": "13752082-2e81-4ebd-84b5-9f29fc6c2aa1",
        "value": "web-jow-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:19+00:00",
        "timestamp": "1774019059",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b23fb7d-6f45-4b44-9971-e0c14651a60b",
        "value": "web-jp-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:19+00:00",
        "timestamp": "1774019059",
        "to_ids": true,
        "type": "domain",
        "uuid": "196ffcd2-bc27-484f-b7a0-7a711ca838bf",
        "value": "web-js-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:19+00:00",
        "timestamp": "1774019059",
        "to_ids": true,
        "type": "domain",
        "uuid": "130b5e49-9228-41ba-97b4-b64d3f19981b",
        "value": "web-k-qapps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:19+00:00",
        "timestamp": "1774019059",
        "to_ids": true,
        "type": "domain",
        "uuid": "5158a8fb-dd1b-4404-ab19-ea412561d1a7",
        "value": "web-kia-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:19+00:00",
        "timestamp": "1774019060",
        "to_ids": true,
        "type": "domain",
        "uuid": "d89456c9-fc38-472a-9779-9f5e7260ae53",
        "value": "web-kr-sys-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:20+00:00",
        "timestamp": "1774019060",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa3444f7-092b-4a89-bb0d-7cf99798c74f",
        "value": "web-kt-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:20+00:00",
        "timestamp": "1774019060",
        "to_ids": true,
        "type": "domain",
        "uuid": "91709ac5-8eac-40a3-91d4-308c0db4e6f4",
        "value": "web-l-rapps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:20+00:00",
        "timestamp": "1774019060",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5755246-cc96-4d4a-a1ea-2ff0c9034cbb",
        "value": "web-lane-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:20+00:00",
        "timestamp": "1774019060",
        "to_ids": true,
        "type": "domain",
        "uuid": "74d6f2b7-2345-4cbf-baaf-95121030facb",
        "value": "web-lgp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:20+00:00",
        "timestamp": "1774019060",
        "to_ids": true,
        "type": "domain",
        "uuid": "30fb7215-93df-4aa5-bbb7-7d59eac2a57e",
        "value": "web-lkn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:20+00:00",
        "timestamp": "1774019060",
        "to_ids": true,
        "type": "domain",
        "uuid": "94b5c9ef-9f5b-4abb-b212-37d948f44e23",
        "value": "web-lu-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:21+00:00",
        "timestamp": "1774019061",
        "to_ids": true,
        "type": "domain",
        "uuid": "041e4a03-b50e-4a99-852c-e8347b8832ef",
        "value": "web-matrix-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:21+00:00",
        "timestamp": "1774019061",
        "to_ids": true,
        "type": "domain",
        "uuid": "b87603fc-bc76-4cd2-b55d-cea2d56c3d48",
        "value": "web-mhs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:21+00:00",
        "timestamp": "1774019061",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d323dbd-99ad-430c-a449-19953412e77f",
        "value": "web-mno-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:21+00:00",
        "timestamp": "1774019061",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b9d5c37-5221-4f65-8a84-3812541cf2d0",
        "value": "web-msg-live-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:21+00:00",
        "timestamp": "1774019061",
        "to_ids": true,
        "type": "domain",
        "uuid": "36ca9b97-2eb2-483f-a969-1a0d4abcfff6",
        "value": "web-msg-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:21+00:00",
        "timestamp": "1774019061",
        "to_ids": true,
        "type": "domain",
        "uuid": "288b09af-d9ac-480f-88d4-4b346f36d579",
        "value": "web-msu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:21+00:00",
        "timestamp": "1774019062",
        "to_ids": true,
        "type": "domain",
        "uuid": "f38cd871-eaf1-45f8-97a9-8c50f48befb2",
        "value": "web-mx-intl-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:22+00:00",
        "timestamp": "1774019062",
        "to_ids": true,
        "type": "domain",
        "uuid": "37f6f945-b16f-4ec7-ab57-12f8b406049e",
        "value": "web-my-node-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:22+00:00",
        "timestamp": "1774019062",
        "to_ids": true,
        "type": "domain",
        "uuid": "84e638c3-2679-45a0-8af3-3231d6d1c521",
        "value": "web-mzp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:22+00:00",
        "timestamp": "1774019062",
        "to_ids": true,
        "type": "domain",
        "uuid": "00336fc2-fb0e-422e-99f2-a18a684f95c4",
        "value": "web-nova-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:22+00:00",
        "timestamp": "1774019062",
        "to_ids": true,
        "type": "domain",
        "uuid": "d406a5da-2145-4afc-b759-c736e5fec2e1",
        "value": "web-nw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:22+00:00",
        "timestamp": "1774019062",
        "to_ids": true,
        "type": "domain",
        "uuid": "119eb667-413c-4f37-b5b3-8e67c8551de9",
        "value": "web-nz-main-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:22+00:00",
        "timestamp": "1774019062",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4a9f84a-09cb-4f85-801d-207f042a22b5",
        "value": "web-okm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:22+00:00",
        "timestamp": "1774019063",
        "to_ids": true,
        "type": "domain",
        "uuid": "169dd6ba-8351-4df3-93f6-ddf4b02dfb58",
        "value": "web-online-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:23+00:00",
        "timestamp": "1774019063",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a7ebc77-ddf9-4a8a-a8c4-656a1659991d",
        "value": "web-ox-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:23+00:00",
        "timestamp": "1774019063",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfb3949f-c63a-45b5-890e-471379ee25f0",
        "value": "web-pdr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:23+00:00",
        "timestamp": "1774019063",
        "to_ids": true,
        "type": "domain",
        "uuid": "1588338c-f55e-4e5a-a81b-22fcd477cc09",
        "value": "web-ph-core-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:23+00:00",
        "timestamp": "1774019063",
        "to_ids": true,
        "type": "domain",
        "uuid": "6066765d-55be-4d3e-b19f-de8bd37fc175",
        "value": "web-pqr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:23+00:00",
        "timestamp": "1774019063",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa959391-fdb8-4a4d-89e2-b38230b87d13",
        "value": "web-py-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:23+00:00",
        "timestamp": "1774019063",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bc75720-0ed7-464c-bf73-8e7ec4b2c8c9",
        "value": "web-qaz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:23+00:00",
        "timestamp": "1774019064",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbd832b4-67e1-4810-9ace-5bd5ec361e39",
        "value": "web-qbx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:24+00:00",
        "timestamp": "1774019064",
        "to_ids": true,
        "type": "domain",
        "uuid": "01e76133-a334-4093-8dd8-ffa7e5482986",
        "value": "web-qrs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:24+00:00",
        "timestamp": "1774019064",
        "to_ids": true,
        "type": "domain",
        "uuid": "465e635a-e60a-412c-a00c-6db6856c56bd",
        "value": "web-qte-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:24+00:00",
        "timestamp": "1774019064",
        "to_ids": true,
        "type": "domain",
        "uuid": "9444e4ae-b3a5-434c-aa98-a09502b33886",
        "value": "web-qz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:24+00:00",
        "timestamp": "1774019064",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2342d04-375d-4d0d-bbbf-70863c8d90a7",
        "value": "web-rja-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:24+00:00",
        "timestamp": "1774019064",
        "to_ids": true,
        "type": "domain",
        "uuid": "3446a400-d89c-4bd5-9a19-49af29fe5952",
        "value": "web-rku-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:24+00:00",
        "timestamp": "1774019064",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8591392-dd0a-4372-9bde-2ca424a375ef",
        "value": "web-rw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:24+00:00",
        "timestamp": "1774019065",
        "to_ids": true,
        "type": "domain",
        "uuid": "27005f2d-0898-4148-b3cf-044c85aea142",
        "value": "web-sa-tech-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:25+00:00",
        "timestamp": "1774019065",
        "to_ids": true,
        "type": "domain",
        "uuid": "63f76420-7b69-48a0-8e42-9553cb33c149",
        "value": "web-sg-api-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:25+00:00",
        "timestamp": "1774019065",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb0cce28-a376-4869-bcfb-79c9819971fd",
        "value": "web-shift-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:25+00:00",
        "timestamp": "1774019065",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8b547b8-9657-4bdc-9c12-f4cb7a8d8188",
        "value": "web-sjx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:25+00:00",
        "timestamp": "1774019065",
        "to_ids": true,
        "type": "domain",
        "uuid": "447d8b52-149c-4687-b14c-562853cfbf71",
        "value": "web-smh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:25+00:00",
        "timestamp": "1774019065",
        "to_ids": true,
        "type": "domain",
        "uuid": "111c3f0f-49a7-45c4-88c0-4391de67ff6e",
        "value": "web-tqy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:25+00:00",
        "timestamp": "1774019065",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3460422-bd21-4d03-acb9-9c093d364b07",
        "value": "web-tr-login-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:26+00:00",
        "timestamp": "1774019066",
        "to_ids": true,
        "type": "domain",
        "uuid": "1733ee29-ed91-41b0-b061-9385fae50520",
        "value": "web-trv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:26+00:00",
        "timestamp": "1774019066",
        "to_ids": true,
        "type": "domain",
        "uuid": "44996237-9ed6-4740-8b4c-7989d42e6925",
        "value": "web-tw-com-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:26+00:00",
        "timestamp": "1774019066",
        "to_ids": true,
        "type": "domain",
        "uuid": "aaede580-761d-4856-bad1-b1f2a7cf420d",
        "value": "web-us-int-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:26+00:00",
        "timestamp": "1774019066",
        "to_ids": true,
        "type": "domain",
        "uuid": "f376043f-0d85-4630-a5ce-a76eac01f4c3",
        "value": "web-vkt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:26+00:00",
        "timestamp": "1774019066",
        "to_ids": true,
        "type": "domain",
        "uuid": "030e0570-5af0-4636-a931-714168ad8347",
        "value": "web-vla-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:26+00:00",
        "timestamp": "1774019066",
        "to_ids": true,
        "type": "domain",
        "uuid": "989acafe-b209-42ac-881f-e6daee1ce366",
        "value": "web-vn-zone-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:26+00:00",
        "timestamp": "1774019067",
        "to_ids": true,
        "type": "domain",
        "uuid": "05b65bae-a816-40b0-b434-00bd32fa3fd1",
        "value": "web-vnm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:27+00:00",
        "timestamp": "1774019067",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4645d5c-293c-4f3e-9225-7464ed3b401f",
        "value": "web-vub-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:27+00:00",
        "timestamp": "1774019067",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7d61e22-89a9-4ada-ad25-666ffc2596dc",
        "value": "web-vwy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:27+00:00",
        "timestamp": "1774019067",
        "to_ids": true,
        "type": "domain",
        "uuid": "7857da8a-3304-428d-8317-90f39b1b0e80",
        "value": "web-wap-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:27+00:00",
        "timestamp": "1774019067",
        "to_ids": true,
        "type": "domain",
        "uuid": "20db54d6-5f85-4b43-a3b8-fdb73c6cba84",
        "value": "web-woc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:27+00:00",
        "timestamp": "1774019067",
        "to_ids": true,
        "type": "domain",
        "uuid": "1cc24556-5e49-43ee-87f6-2ab361e3c1f0",
        "value": "web-wpk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:27+00:00",
        "timestamp": "1774019067",
        "to_ids": true,
        "type": "domain",
        "uuid": "62bf8ce5-4867-46f2-a6b9-ac833576b6aa",
        "value": "web-wsx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:27+00:00",
        "timestamp": "1774019068",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a6a7039-2aa1-4c25-aabb-fa818b2bc5d6",
        "value": "web-xke-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:28+00:00",
        "timestamp": "1774019068",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2ebd53f-918a-4422-877a-6fa07754e04b",
        "value": "web-xmd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:28+00:00",
        "timestamp": "1774019068",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7cadf10-ffc8-442a-93e5-d29538b2b94a",
        "value": "web-xra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:28+00:00",
        "timestamp": "1774019068",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff4ec83e-dee1-4250-941d-f3793214dc1b",
        "value": "web-yhn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:28+00:00",
        "timestamp": "1774019068",
        "to_ids": true,
        "type": "domain",
        "uuid": "334baa0a-b2bc-4b88-b1c1-77f1d17f26b7",
        "value": "web-yzx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:28+00:00",
        "timestamp": "1774019068",
        "to_ids": true,
        "type": "domain",
        "uuid": "baa94f08-974c-4a39-a12a-cf1b0d0d2a31",
        "value": "web-za-global-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:28+00:00",
        "timestamp": "1774019068",
        "to_ids": true,
        "type": "domain",
        "uuid": "05d32e4f-2a58-42cf-8aaa-55b948fef641",
        "value": "web-zone-app-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:29+00:00",
        "timestamp": "1774019069",
        "to_ids": true,
        "type": "domain",
        "uuid": "9800351a-f7da-4643-89ed-3cfdf7d7f2e6",
        "value": "web-zpl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:29+00:00",
        "timestamp": "1774019069",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab4dca1b-9937-4104-8a8a-f438c9b0beac",
        "value": "web-zxc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:29+00:00",
        "timestamp": "1774019069",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f0b5de2-7c25-4c4d-8b8a-d56b22a0515b",
        "value": "webapp-cn-org-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:29+00:00",
        "timestamp": "1774019069",
        "to_ids": true,
        "type": "domain",
        "uuid": "1962bd7c-0cde-4dc4-8891-4eb94f2014d4",
        "value": "webapp-link-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:29+00:00",
        "timestamp": "1774019069",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe4fa9de-094e-4ac5-9acb-a073f3eaea6a",
        "value": "webchat-cn-hub-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:29+00:00",
        "timestamp": "1774019069",
        "to_ids": true,
        "type": "domain",
        "uuid": "127fbc2d-64fc-4fcb-8006-b06a09539462",
        "value": "webhub-live-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:29+00:00",
        "timestamp": "1774019070",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1e02bc4-d41f-40ab-a17b-2751eee2fa3d",
        "value": "webhub-pro-hk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:30+00:00",
        "timestamp": "1774019070",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a29c0dc-71c0-4707-b658-b3ab1a2d77ea",
        "value": "webim-link-pro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:30+00:00",
        "timestamp": "1774019070",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c74c6ce-704b-4c5e-a143-2e380108fb79",
        "value": "webmsg-cn-net-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:30+00:00",
        "timestamp": "1774019070",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bda12d4-adbb-44e8-9af2-c308f0a0db1c",
        "value": "webmsg-live-hk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:30+00:00",
        "timestamp": "1774019070",
        "to_ids": true,
        "type": "domain",
        "uuid": "f848d08e-1e29-4e48-b743-cca26557981b",
        "value": "webmsg-live-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:30+00:00",
        "timestamp": "1774019070",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2dfdf93-e322-4a1e-88c0-b63a4d5b73eb",
        "value": "webonline-pro-hk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:30+00:00",
        "timestamp": "1774019071",
        "to_ids": true,
        "type": "domain",
        "uuid": "13ef6087-d597-449e-9320-d68f27b37a42",
        "value": "wfa-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:31+00:00",
        "timestamp": "1774019071",
        "to_ids": true,
        "type": "domain",
        "uuid": "01d4127b-aa89-4ea0-bc65-bbd229d23a9a",
        "value": "wga-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:31+00:00",
        "timestamp": "1774019071",
        "to_ids": true,
        "type": "domain",
        "uuid": "988745c3-a786-4996-a970-d5b05d88bf71",
        "value": "whatsapp-abd.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:31+00:00",
        "timestamp": "1774019071",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae742401-7765-4af2-810d-b8baea2d7db1",
        "value": "whatsapp-ace.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:31+00:00",
        "timestamp": "1774019071",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fc59711-66db-463a-9be9-b0906436802b",
        "value": "whatsapp-adf.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:31+00:00",
        "timestamp": "1774019071",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce73dd05-ddb2-4a44-b4e5-c108d38cc263",
        "value": "whatsapp-bcd.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:31+00:00",
        "timestamp": "1774019071",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba34e9c0-49ad-45cc-b620-e3a888a2347c",
        "value": "whatsapp-bdf.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:31+00:00",
        "timestamp": "1774019072",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2e9abe0-3b70-4774-a6cb-577c1b999cf4",
        "value": "whatsapp-beg.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:32+00:00",
        "timestamp": "1774019072",
        "to_ids": true,
        "type": "domain",
        "uuid": "5221da30-c0c4-46cb-884a-392f9b7159c3",
        "value": "whatsapp-bhi.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:32+00:00",
        "timestamp": "1774019072",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f5ec041-71b9-42c4-89de-6560f2f63d76",
        "value": "whatsapp-cfj.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:32+00:00",
        "timestamp": "1774019072",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c516e3f-ee2b-4149-890a-fe3414e72e33",
        "value": "whatsapp-def.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:32+00:00",
        "timestamp": "1774019072",
        "to_ids": true,
        "type": "domain",
        "uuid": "436b60e5-d332-421f-a918-241af4f8e218",
        "value": "whatsapp-dgh.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:32+00:00",
        "timestamp": "1774019072",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e25359b-101a-49c3-936a-bae71224cc8b",
        "value": "whatsapp-djk.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:32+00:00",
        "timestamp": "1774019072",
        "to_ids": true,
        "type": "domain",
        "uuid": "73141c3b-f7e8-4a51-9ce0-8e05feff8c38",
        "value": "whatsapp-efg.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:32+00:00",
        "timestamp": "1774019073",
        "to_ids": true,
        "type": "domain",
        "uuid": "286d7799-4156-43b7-b37c-fcfc6f40ee78",
        "value": "whatsapp-ehi.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:33+00:00",
        "timestamp": "1774019073",
        "to_ids": true,
        "type": "domain",
        "uuid": "b28d4502-b1ff-4c1f-b2f8-c2ffcd75cfcf",
        "value": "whatsapp-ejk.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:33+00:00",
        "timestamp": "1774019073",
        "to_ids": true,
        "type": "domain",
        "uuid": "c83eb759-c118-4491-b879-fa7d5166630e",
        "value": "whatsapp-fgh.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:33+00:00",
        "timestamp": "1774019073",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebabb506-eb58-4dad-bf82-e95eac2304ee",
        "value": "whatsapp-ghi.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:33+00:00",
        "timestamp": "1774019073",
        "to_ids": true,
        "type": "domain",
        "uuid": "74cc2f0b-b2b8-46a3-b44d-c649ebb1e76d",
        "value": "whatsapp-hij.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:33+00:00",
        "timestamp": "1774019073",
        "to_ids": true,
        "type": "domain",
        "uuid": "63f53fc8-d7af-4e93-bef7-236e4e587a05",
        "value": "whatsapp-hlm.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:33+00:00",
        "timestamp": "1774019073",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a8227ce-ebd0-4693-9c9d-30990dbd9fea",
        "value": "whatsapp-jkl.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:34+00:00",
        "timestamp": "1774019074",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8c7841e-6d28-4871-8104-4c13421eeb2e",
        "value": "whatsapp-jmn.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:34+00:00",
        "timestamp": "1774019074",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbb86627-ccdc-4855-baee-effb016adce8",
        "value": "whatsapp-klm.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:34+00:00",
        "timestamp": "1774019074",
        "to_ids": true,
        "type": "domain",
        "uuid": "55101ec5-4e52-467d-b7a2-ad3dc7e47784",
        "value": "whatsapp-kno.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:34+00:00",
        "timestamp": "1774019074",
        "to_ids": true,
        "type": "domain",
        "uuid": "c528503b-7a0f-402f-8046-5b36728597a9",
        "value": "whatsapp-lop.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:34+00:00",
        "timestamp": "1774019074",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d9c4d42-369f-4863-84b2-a160e3dc4f84",
        "value": "whatsapp-nop.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:34+00:00",
        "timestamp": "1774019074",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0590a40-d21b-4232-a7f2-6984c9248ba1",
        "value": "whatsapp-nrs.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:34+00:00",
        "timestamp": "1774019075",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a609e8c-f1a6-441e-b532-672bef8014a7",
        "value": "whatsapp-opq.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:35+00:00",
        "timestamp": "1774019075",
        "to_ids": true,
        "type": "domain",
        "uuid": "67c4eef0-d3e7-45cc-8dbd-9a91872e6ed1",
        "value": "whatsapp-pux.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:35+00:00",
        "timestamp": "1774019075",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1324fc6-23d8-453d-ba7f-b7937a464b3e",
        "value": "whatsapp-qrs.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:35+00:00",
        "timestamp": "1774019075",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c1038b1-6da8-43e9-b297-420b98c2a4a2",
        "value": "whatsapp-rst.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:35+00:00",
        "timestamp": "1774019075",
        "to_ids": true,
        "type": "domain",
        "uuid": "988c2ef9-1a40-4917-989a-853c67694b0c",
        "value": "whatsapp-tuv.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:35+00:00",
        "timestamp": "1774019075",
        "to_ids": true,
        "type": "domain",
        "uuid": "4576be4f-fc6b-463b-9e9b-1df52db1e624",
        "value": "whatsapp-uvw.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:35+00:00",
        "timestamp": "1774019075",
        "to_ids": true,
        "type": "domain",
        "uuid": "eec3b477-10dd-45f7-a5e2-0a38d4f95b33",
        "value": "whatsapp-wxy.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:35+00:00",
        "timestamp": "1774019076",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3a14bdb-a1d8-4d9c-be75-bbb6cb11845f",
        "value": "whatsapp-xyz.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:36+00:00",
        "timestamp": "1774019076",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a48e239-e4da-4ad1-b85c-eb84ec6b7c3d",
        "value": "whatsapp-yza.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:36+00:00",
        "timestamp": "1774019076",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f233006-4c1c-4951-b192-089799247b22",
        "value": "whatsapp-zab.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:36+00:00",
        "timestamp": "1774019076",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad47b98b-984d-4f55-a895-3442ee3b04fe",
        "value": "whatsappapi.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:36+00:00",
        "timestamp": "1774019076",
        "to_ids": true,
        "type": "domain",
        "uuid": "35eace1c-2ba3-4155-b96f-e2fb015cba41",
        "value": "wkb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:36+00:00",
        "timestamp": "1774019076",
        "to_ids": true,
        "type": "domain",
        "uuid": "df0be232-1c91-4f46-abb1-01ad662c9e55",
        "value": "wkm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:36+00:00",
        "timestamp": "1774019076",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c6ba751-299c-4c1f-8aab-d6a1b84a34dd",
        "value": "wkphl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:37+00:00",
        "timestamp": "1774019077",
        "to_ids": true,
        "type": "domain",
        "uuid": "b67f1a7b-7dc0-4f37-8f76-9055f7b6a918",
        "value": "wlm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:37+00:00",
        "timestamp": "1774019077",
        "to_ids": true,
        "type": "domain",
        "uuid": "f53e3437-eeac-436c-b45a-243160cdbde7",
        "value": "wls-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:37+00:00",
        "timestamp": "1774019077",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a0c4eb1-2b3e-4b9f-a279-48f60aacbcf5",
        "value": "world-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:37+00:00",
        "timestamp": "1774019077",
        "to_ids": true,
        "type": "domain",
        "uuid": "d189687d-7d98-4f96-be86-de43cdf7cd4c",
        "value": "wqr-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:37+00:00",
        "timestamp": "1774019077",
        "to_ids": true,
        "type": "domain",
        "uuid": "73956545-9bbd-4cac-87f3-fd4befe5c780",
        "value": "wto-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:37+00:00",
        "timestamp": "1774019077",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ebed382-bd0d-4fee-8f3a-1ac56087474a",
        "value": "www-app-net-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:37+00:00",
        "timestamp": "1774019078",
        "to_ids": true,
        "type": "domain",
        "uuid": "8335a920-4114-4ea8-9c9a-8cac13a3035c",
        "value": "www-chat-org-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:38+00:00",
        "timestamp": "1774019078",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a7ec9d7-d375-4061-ab22-862e75df90a3",
        "value": "wxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:38+00:00",
        "timestamp": "1774019078",
        "to_ids": true,
        "type": "domain",
        "uuid": "7bcb7252-f1df-47dc-b2d5-751f79df6262",
        "value": "wxy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:38+00:00",
        "timestamp": "1774019078",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbf8733e-b725-49d9-843a-065687dc7a1c",
        "value": "wzc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:38+00:00",
        "timestamp": "1774019078",
        "to_ids": true,
        "type": "domain",
        "uuid": "057cda18-0d7f-4052-a32b-c70b93ab0a6b",
        "value": "wzq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:38+00:00",
        "timestamp": "1774019078",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2c5248f-8be5-4c26-9e1a-56d87fb17772",
        "value": "x-e-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:38+00:00",
        "timestamp": "1774019078",
        "to_ids": true,
        "type": "domain",
        "uuid": "f94f8306-baeb-4be4-80db-96c96901385f",
        "value": "x-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:38+00:00",
        "timestamp": "1774019079",
        "to_ids": true,
        "type": "domain",
        "uuid": "38a6539c-f260-4654-8ef2-3b22c2791e3b",
        "value": "x-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:39+00:00",
        "timestamp": "1774019079",
        "to_ids": true,
        "type": "domain",
        "uuid": "20ac7c75-03b5-4a8a-8429-3f48e244d5b2",
        "value": "x-w-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:39+00:00",
        "timestamp": "1774019079",
        "to_ids": true,
        "type": "domain",
        "uuid": "e212091d-741a-49c6-a12b-e071b5c473e1",
        "value": "xad-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:39+00:00",
        "timestamp": "1774019079",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5c73995-d6d8-457f-bda9-3bb7ae9257c7",
        "value": "xad-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:39+00:00",
        "timestamp": "1774019079",
        "to_ids": true,
        "type": "domain",
        "uuid": "174a026c-bdf1-494e-a8b3-ca2562ee4208",
        "value": "xar-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:39+00:00",
        "timestamp": "1774019079",
        "to_ids": true,
        "type": "domain",
        "uuid": "c54e2d30-76ee-4e40-9798-bdd90acae45d",
        "value": "xar-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:39+00:00",
        "timestamp": "1774019079",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7a3ec13-6944-48a5-8d5f-6309b290624a",
        "value": "xbr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:39+00:00",
        "timestamp": "1774019080",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5b9c553-66c0-46b5-967b-3f096b71f2cb",
        "value": "xdt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:40+00:00",
        "timestamp": "1774019080",
        "to_ids": true,
        "type": "domain",
        "uuid": "452e6b20-99cd-4521-bb6a-44451a966b8f",
        "value": "xga-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:40+00:00",
        "timestamp": "1774019080",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c2cab41-253e-46ac-8882-9048a1de4c39",
        "value": "xgk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:40+00:00",
        "timestamp": "1774019080",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a62c4ed-0891-4cb8-8b2d-6f644f68227e",
        "value": "xjf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:40+00:00",
        "timestamp": "1774019080",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e538531-8289-43b5-a41e-da4a552b1823",
        "value": "xjm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:40+00:00",
        "timestamp": "1774019080",
        "to_ids": true,
        "type": "domain",
        "uuid": "37d68061-220e-47df-9383-186e2f817578",
        "value": "xmp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:40+00:00",
        "timestamp": "1774019080",
        "to_ids": true,
        "type": "domain",
        "uuid": "401a0d40-d2f3-4a01-9bfd-061276926963",
        "value": "xpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:41+00:00",
        "timestamp": "1774019081",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad535aeb-22b6-481f-a6bf-36c11d6a11fb",
        "value": "xra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:41+00:00",
        "timestamp": "1774019081",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6d96f79-42c7-40d3-a2ad-f770da7e49cf",
        "value": "xso-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:41+00:00",
        "timestamp": "1774019081",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d0386bb-64ae-4f94-9249-8e96f789affb",
        "value": "xsr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:41+00:00",
        "timestamp": "1774019081",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb8f391e-7bba-499a-bfe6-a408b53f5bfa",
        "value": "xuy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:41+00:00",
        "timestamp": "1774019081",
        "to_ids": true,
        "type": "domain",
        "uuid": "26b86389-9cb8-4843-9193-a4648b2dfdb5",
        "value": "xuy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:41+00:00",
        "timestamp": "1774019081",
        "to_ids": true,
        "type": "domain",
        "uuid": "366be5bc-e994-42b0-863d-4f42c188b6ca",
        "value": "xzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:41+00:00",
        "timestamp": "1774019082",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a4b6126-0917-4001-af1b-94972fe3b7ab",
        "value": "y-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:42+00:00",
        "timestamp": "1774019082",
        "to_ids": true,
        "type": "domain",
        "uuid": "33605e66-be81-46d8-add7-7c8fa23031e7",
        "value": "y-g-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:42+00:00",
        "timestamp": "1774019082",
        "to_ids": true,
        "type": "domain",
        "uuid": "8841ba45-01c9-4313-b85e-a63c398ebb67",
        "value": "y-i-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:42+00:00",
        "timestamp": "1774019082",
        "to_ids": true,
        "type": "domain",
        "uuid": "27b4bbc1-d2db-447d-bb00-6e38a6ec8bad",
        "value": "yac-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:42+00:00",
        "timestamp": "1774019082",
        "to_ids": true,
        "type": "domain",
        "uuid": "602b91b2-c4d0-457e-bdb1-4e97aede827f",
        "value": "ybe-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:42+00:00",
        "timestamp": "1774019082",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d1510bf-3e4d-407c-9f19-49aac58a5ba8",
        "value": "ybr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:42+00:00",
        "timestamp": "1774019082",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4a5d7b7-d10a-43e8-97bb-74254881edca",
        "value": "ybs-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:42+00:00",
        "timestamp": "1774019083",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ae44b6b-6a89-44fb-9c20-956de29d3f04",
        "value": "ybs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:43+00:00",
        "timestamp": "1774019083",
        "to_ids": true,
        "type": "domain",
        "uuid": "41b014ce-3667-4f5d-b21d-49a7b294357a",
        "value": "ydl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:43+00:00",
        "timestamp": "1774019083",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b0259c2-1f67-4558-a732-7a0db544e562",
        "value": "ygr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:43+00:00",
        "timestamp": "1774019083",
        "to_ids": true,
        "type": "domain",
        "uuid": "92282896-856d-4eb3-b434-6f868f595b37",
        "value": "yhm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:43+00:00",
        "timestamp": "1774019083",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbb23c3c-57a6-498b-8cde-2b596082f789",
        "value": "ykf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:43+00:00",
        "timestamp": "1774019083",
        "to_ids": true,
        "type": "domain",
        "uuid": "48bd4804-3a8e-46a7-87e5-4c31aa040bec",
        "value": "ykj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:43+00:00",
        "timestamp": "1774019084",
        "to_ids": true,
        "type": "domain",
        "uuid": "28480a0c-07c7-4487-ad35-e31ae24ff541",
        "value": "ykt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:44+00:00",
        "timestamp": "1774019084",
        "to_ids": true,
        "type": "domain",
        "uuid": "8615205a-61a5-428a-ae9b-e8749c7aa204",
        "value": "yla-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:44+00:00",
        "timestamp": "1774019084",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c80f9f6-0d8a-4b6b-8e04-2840f5353158",
        "value": "yno-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:44+00:00",
        "timestamp": "1774019084",
        "to_ids": true,
        "type": "domain",
        "uuid": "c61965f5-eb91-4af2-89dc-a9ade21a2074",
        "value": "yqb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:44+00:00",
        "timestamp": "1774019084",
        "to_ids": true,
        "type": "domain",
        "uuid": "812b31d5-6767-4dd4-a8d1-28440aef9690",
        "value": "yqp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:44+00:00",
        "timestamp": "1774019085",
        "to_ids": true,
        "type": "domain",
        "uuid": "d292f74e-7b73-490a-8143-15a74f24c361",
        "value": "ywt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:45+00:00",
        "timestamp": "1774019085",
        "to_ids": true,
        "type": "domain",
        "uuid": "22fe82e9-cef0-4e6b-a1ee-5555557b32ca",
        "value": "yxo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:45+00:00",
        "timestamp": "1774019085",
        "to_ids": true,
        "type": "domain",
        "uuid": "98e829c0-9bb3-4145-9593-ecfb619d5a5e",
        "value": "yxp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:45+00:00",
        "timestamp": "1774019085",
        "to_ids": true,
        "type": "domain",
        "uuid": "92aa9000-3560-42be-bcc6-c4ae4759a0b2",
        "value": "yzab.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:45+00:00",
        "timestamp": "1774019085",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7b31407-042f-4cb8-a5c7-60e09087c474",
        "value": "yzv-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:45+00:00",
        "timestamp": "1774019085",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf6103d1-153d-40e5-ba2d-688de652b460",
        "value": "yzv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:45+00:00",
        "timestamp": "1774019085",
        "to_ids": true,
        "type": "domain",
        "uuid": "e55cf38b-6652-481b-af32-ee1c0e15b26d",
        "value": "z-g-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:46+00:00",
        "timestamp": "1774019086",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2410785-828d-46d3-9969-89e85f17666d",
        "value": "z-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:46+00:00",
        "timestamp": "1774019086",
        "to_ids": true,
        "type": "domain",
        "uuid": "62978015-2387-4a5b-ab6e-138eb6a18495",
        "value": "z-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:46+00:00",
        "timestamp": "1774019086",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5f822a9-547b-4cee-81d2-00117802eb80",
        "value": "z-z-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:46+00:00",
        "timestamp": "1774019086",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ccf86a4-00f9-4115-adae-dfa0ae53964c",
        "value": "zaw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:46+00:00",
        "timestamp": "1774019086",
        "to_ids": true,
        "type": "domain",
        "uuid": "13a51ce2-e5e7-45c9-8906-24fed187b581",
        "value": "zbr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:46+00:00",
        "timestamp": "1774019086",
        "to_ids": true,
        "type": "domain",
        "uuid": "d50c2362-4f1a-4c59-8bdb-f9dcf3104c3a",
        "value": "zcf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:46+00:00",
        "timestamp": "1774019087",
        "to_ids": true,
        "type": "domain",
        "uuid": "81be3f56-45d2-41b1-8884-9b6be054683b",
        "value": "zct-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:47+00:00",
        "timestamp": "1774019087",
        "to_ids": true,
        "type": "domain",
        "uuid": "5aab18c9-c661-46ab-86d5-06e571d20548",
        "value": "zct-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:47+00:00",
        "timestamp": "1774019087",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9e85e5b-febb-44aa-9939-8c7cfb3e7768",
        "value": "zfh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:47+00:00",
        "timestamp": "1774019087",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bd3d470-e4d6-4305-bec6-d099e5420ca4",
        "value": "zh-bz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:47+00:00",
        "timestamp": "1774019087",
        "to_ids": true,
        "type": "domain",
        "uuid": "2820aa98-267f-4f58-8297-3f7d637688c0",
        "value": "zh-cb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:47+00:00",
        "timestamp": "1774019087",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c08caab-c20d-49ac-a8ec-15d3f2f58862",
        "value": "zh-dv-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:47+00:00",
        "timestamp": "1774019087",
        "to_ids": true,
        "type": "domain",
        "uuid": "3308e935-79fe-4ecb-a5bf-5d3ebf11cc41",
        "value": "zh-fj-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:47+00:00",
        "timestamp": "1774019088",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebbf98f4-0cf2-420f-91ef-47cc7b12d58c",
        "value": "zh-gu-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:48+00:00",
        "timestamp": "1774019088",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bdba373-8164-4027-99c2-73f113fe0128",
        "value": "zh-jl-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:48+00:00",
        "timestamp": "1774019088",
        "to_ids": true,
        "type": "domain",
        "uuid": "9dc9762c-f310-406d-b5b2-b0ed46fc86f3",
        "value": "zh-lp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:48+00:00",
        "timestamp": "1774019088",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0d3e37d-67fa-4853-895c-3135e87dc1fb",
        "value": "zh-mv-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:48+00:00",
        "timestamp": "1774019088",
        "to_ids": true,
        "type": "domain",
        "uuid": "0308bc31-2d11-40f5-9395-510d3a41c00d",
        "value": "zh-ns-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:48+00:00",
        "timestamp": "1774019088",
        "to_ids": true,
        "type": "domain",
        "uuid": "e383766b-edea-4f37-b390-197ff8a006a6",
        "value": "zh-ok-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:48+00:00",
        "timestamp": "1774019089",
        "to_ids": true,
        "type": "domain",
        "uuid": "d002059c-2d15-4ad3-a3ea-429edc9a8176",
        "value": "zh-pm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:49+00:00",
        "timestamp": "1774019089",
        "to_ids": true,
        "type": "domain",
        "uuid": "67b6a9b5-c0d6-408b-bde2-449cffe96f78",
        "value": "zh-qx-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:49+00:00",
        "timestamp": "1774019089",
        "to_ids": true,
        "type": "domain",
        "uuid": "7525f086-2684-46f0-b349-1fb25e1528d9",
        "value": "zh-rk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:49+00:00",
        "timestamp": "1774019089",
        "to_ids": true,
        "type": "domain",
        "uuid": "e32d6278-2315-4e29-993b-b4b674847ed3",
        "value": "zh-st-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:49+00:00",
        "timestamp": "1774019089",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4d3c754-6128-4ff1-adc4-48314b926f38",
        "value": "zh-wc-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:49+00:00",
        "timestamp": "1774019089",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3d650b3-caa2-456e-89ec-a3231c474094",
        "value": "zh-xr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:49+00:00",
        "timestamp": "1774019090",
        "to_ids": true,
        "type": "domain",
        "uuid": "11ef6521-8977-4dab-ba87-600b158d1dda",
        "value": "zh-yd-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:50+00:00",
        "timestamp": "1774019090",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fe8093b-9f5f-4fac-b817-0e14a7524ee7",
        "value": "zjc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:50+00:00",
        "timestamp": "1774019090",
        "to_ids": true,
        "type": "domain",
        "uuid": "2438d0dc-b882-4e8a-a9c3-db5efe25ab2c",
        "value": "zkt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:50+00:00",
        "timestamp": "1774019090",
        "to_ids": true,
        "type": "domain",
        "uuid": "a52f69a9-827f-4613-8800-747153739575",
        "value": "znb-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:50+00:00",
        "timestamp": "1774019090",
        "to_ids": true,
        "type": "domain",
        "uuid": "b554f8b4-e573-4cca-828b-bd46230c9098",
        "value": "zpn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:50+00:00",
        "timestamp": "1774019090",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce9ffd5b-2769-4abc-9d7f-0f7dcb0dfb8b",
        "value": "zqd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:50+00:00",
        "timestamp": "1774019090",
        "to_ids": true,
        "type": "domain",
        "uuid": "50cb92db-ff82-4811-a39c-c4e221b5b173",
        "value": "zqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:50+00:00",
        "timestamp": "1774019091",
        "to_ids": true,
        "type": "domain",
        "uuid": "65630956-4105-415d-a3a8-de4b11a8d229",
        "value": "zqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:51+00:00",
        "timestamp": "1774019091",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8c19f8b-d8b1-4e51-8ac8-5294c5a4787f",
        "value": "zqv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:51+00:00",
        "timestamp": "1774019091",
        "to_ids": true,
        "type": "domain",
        "uuid": "3738e0d9-a97c-4c99-a427-d8bdb7617e64",
        "value": "zsbhl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:51+00:00",
        "timestamp": "1774019091",
        "to_ids": true,
        "type": "domain",
        "uuid": "cffe4a42-94d6-492e-9d30-9dbc3d48e171",
        "value": "zsj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:51+00:00",
        "timestamp": "1774019091",
        "to_ids": true,
        "type": "domain",
        "uuid": "6534120d-925f-4326-8cb0-79d8fbf33abf",
        "value": "zta-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:51+00:00",
        "timestamp": "1774019091",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6d15167-47eb-4ce6-a35a-ba6bcd839b84",
        "value": "zvc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:51+00:00",
        "timestamp": "1774019091",
        "to_ids": true,
        "type": "domain",
        "uuid": "24cded37-ba2e-408a-beb2-a157a85f57d5",
        "value": "zvd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:51+00:00",
        "timestamp": "1774019092",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3edab3c-3479-4f18-89d1-ab63853d3727",
        "value": "zvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:52+00:00",
        "timestamp": "1774019092",
        "to_ids": true,
        "type": "domain",
        "uuid": "be1cf0a8-e619-4e0f-a375-5304835d8f31",
        "value": "zwm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:52+00:00",
        "timestamp": "1774019092",
        "to_ids": false,
        "type": "url",
        "uuid": "783c63fc-5c23-4e16-9041-bb3510cebeb4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7923d700a8a8e400dc4c285a4bf597e529033d89",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:52+00:00",
        "timestamp": "1774019092",
        "to_ids": true,
        "type": "domain",
        "uuid": "00a5df7b-af9e-4da2-9cf1-fa339ad0632c",
        "value": "dombove.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:52+00:00",
        "timestamp": "1774019092",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7ce286e-b8d0-49d1-a0ed-73397b55ba0e",
        "value": "fsrwr05.dombove.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:52+00:00",
        "timestamp": "1774019092",
        "to_ids": false,
        "type": "url",
        "uuid": "49c664e9-83ae-4dac-b49e-3f70df5ac39b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9c0f68bbc2f7d4424418271565ed4569d151f609",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:52+00:00",
        "timestamp": "1774019092",
        "to_ids": false,
        "type": "url",
        "uuid": "3cc92192-0b91-4521-80f3-a21f6fbedf64",
        "value": "https://x.com/K_N1kolenko/status/2034973451065114663",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:52+00:00",
        "timestamp": "1774019093",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6ec9f808-1fa0-4aaa-96a8-16d29a939008",
        "value": "146.70.143.166",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:53+00:00",
        "timestamp": "1774019093",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "9a0f6a1b-89e4-42d1-b4e3-3f430203863d",
        "value": "15.229.150.214",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:53+00:00",
        "timestamp": "1774019093",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "efff503a-a781-4d3e-b252-738dbbad13cb",
        "value": "157.245.45.38",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:53+00:00",
        "timestamp": "1774019093",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d929fcde-e79b-489b-a92d-93dede519e2c",
        "value": "167.114.48.166",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:53+00:00",
        "timestamp": "1774019093",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "23367f7c-0d81-4623-8413-6718b094bbb8",
        "value": "172.93.164.102",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:53+00:00",
        "timestamp": "1774019093",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "14318332-5c4f-471f-9234-1e1919df6411",
        "value": "194.116.236.27",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xworm",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:53+00:00",
        "timestamp": "1774019093",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d269aea4-13fb-40c9-9868-1163ee8c8936",
        "value": "38.247.145.235",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:54+00:00",
        "timestamp": "1774019094",
        "to_ids": false,
        "type": "url",
        "uuid": "6e260ef2-9343-4af5-a13e-94c985b34ed4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/69beea52ca2019fd48d200b8dee39467556ebf62",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:54+00:00",
        "timestamp": "1774019094",
        "to_ids": false,
        "type": "url",
        "uuid": "ca1c472e-5e52-41e2-af1e-c7005c557c2f",
        "value": "https://urlscan.io/result/019d0ba4-e16c-7239-9a98-f18460debd60",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:54+00:00",
        "timestamp": "1774019094",
        "to_ids": true,
        "type": "domain",
        "uuid": "f860d6f6-86b8-4950-a4fc-b9802b072a87",
        "value": "nyashteam.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:54+00:00",
        "timestamp": "1774019094",
        "to_ids": false,
        "type": "url",
        "uuid": "1a63d4e3-1220-4493-b055-c1b72e49db59",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c350b2b4270e6fe64c4cc7fc16aace6c202a5d98",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:54+00:00",
        "timestamp": "1774019094",
        "to_ids": false,
        "type": "url",
        "uuid": "ac0232d3-aea1-4da8-a362-de7d3a18db21",
        "value": "https://intel.breakglass.tech/post/salatstealer-s-new-trick-using-ton-blockchain-dns-to-make-c2-takedowns-impossible",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:54+00:00",
        "timestamp": "1774019094",
        "to_ids": false,
        "type": "url",
        "uuid": "d69d9206-c146-4d46-8012-bd3fa8285fed",
        "value": "https://urlscan.io/result/019d0ba3-47a2-75e8-b173-49bf765930d3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:54+00:00",
        "timestamp": "1774019095",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8d4ee73-c447-4694-aa37-73dd54c644c4",
        "value": "nyash.team",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:55+00:00",
        "timestamp": "1774019095",
        "to_ids": false,
        "type": "url",
        "uuid": "e721e9ab-e253-491a-a7a0-b5e3f56f7e68",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/95a607e3002c0831d599ac8007822555bbde65c1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:55+00:00",
        "timestamp": "1774019095",
        "to_ids": true,
        "type": "domain",
        "uuid": "884ad757-fddb-48b1-a00c-c1bcf3f0d2f5",
        "value": "webrat.es",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:55+00:00",
        "timestamp": "1774019095",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7fa19ec-4116-478a-bd29-bba44248fd8c",
        "value": "webrat.life",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "salat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:55+00:00",
        "timestamp": "1774019095",
        "to_ids": true,
        "type": "domain",
        "uuid": "d29cb42f-e0e0-459d-af76-70f3cb98c4d4",
        "value": "webrat.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:55+00:00",
        "timestamp": "1774019095",
        "to_ids": false,
        "type": "url",
        "uuid": "600003c8-fccc-415f-a2fa-14843aef3085",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/acb40883c56b10c4a1e30fb87af7eee640d77133",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T15:04:55+00:00",
        "timestamp": "1774019095",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4c4f753-abcc-4287-bd75-f65dd44b516a",
        "value": "sectigoapps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:04+00:00",
        "timestamp": "1774022405",
        "to_ids": false,
        "type": "url",
        "uuid": "3d9ea8b7-1add-4757-8089-fe46f15c1def",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e50246156e6d1babfdab0e3654d3d854be20f347",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:05+00:00",
        "timestamp": "1774022405",
        "to_ids": false,
        "type": "url",
        "uuid": "00853507-2dd1-4852-bf3b-d79495c4e1af",
        "value": "https://x.com/smica83/status/2035015432277520845",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:05+00:00",
        "timestamp": "1774022406",
        "to_ids": false,
        "type": "url",
        "uuid": "e97c8198-0f51-47a7-a3e1-b05f8c2f648e",
        "value": "https://tria.ge/260320-stwazahy9t/behavioral1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:06+00:00",
        "timestamp": "1774022406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "9941edb6-31aa-4b2c-b1e1-c4474f38104b",
        "value": "185.208.159.254",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:06+00:00",
        "timestamp": "1774022406",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1afcd0f-3340-4e2e-8e8d-99f53030b0cf",
        "value": "0oking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:07+00:00",
        "timestamp": "1774022407",
        "to_ids": true,
        "type": "domain",
        "uuid": "46ba496e-1dbe-4ad8-9f11-deea8604fb77",
        "value": "10marchdoom.blogspot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:07+00:00",
        "timestamp": "1774022407",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e7c639b-1af7-4b3e-b8d2-249ac17f577e",
        "value": "missusecapmrch.blogspot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:07+00:00",
        "timestamp": "1774022407",
        "to_ids": true,
        "type": "domain",
        "uuid": "713a135c-85fd-40fb-8dd7-a243b0a87992",
        "value": "lastest.0oking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:07+00:00",
        "timestamp": "1774022407",
        "to_ids": false,
        "type": "url",
        "uuid": "eaa3e627-f91e-41f6-a7a6-ee575df553db",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/54783d08fe50c98c7a9bf806b1d200bb5c48a823",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:07+00:00",
        "timestamp": "1774022407",
        "to_ids": true,
        "type": "domain",
        "uuid": "882c3f3f-b09c-4599-9f97-18358486cc26",
        "value": "centralmetric.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:07+00:00",
        "timestamp": "1774022407",
        "to_ids": true,
        "type": "domain",
        "uuid": "18589bab-2f23-43d4-b56b-da6582089c1a",
        "value": "fondoviva.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:07+00:00",
        "timestamp": "1774022408",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d00261f-355e-42ff-90ff-bf716b902b0a",
        "value": "lb2area.silicanet.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:08+00:00",
        "timestamp": "1774022408",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f280994-5a04-48db-a4f5-cde1952fda9f",
        "value": "load3edge.centralmetric.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:08+00:00",
        "timestamp": "1774022408",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3df96e7-e6ef-4886-8067-9f051d0f6bf9",
        "value": "marisnode.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:08+00:00",
        "timestamp": "1774022408",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e89f4bf-7835-4565-8d42-e0211f2bf035",
        "value": "rack1infra.fondoviva.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:08+00:00",
        "timestamp": "1774022408",
        "to_ids": true,
        "type": "domain",
        "uuid": "6dd087e4-8fce-4209-be8c-405886b0c30e",
        "value": "silicanet.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:08+00:00",
        "timestamp": "1774022408",
        "to_ids": true,
        "type": "domain",
        "uuid": "0366e807-986e-4adb-bcb2-a28822207730",
        "value": "sinapsov.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:08+00:00",
        "timestamp": "1774022409",
        "to_ids": true,
        "type": "domain",
        "uuid": "00d3c02a-089c-4dee-9b25-c8e53ff2c96a",
        "value": "sys2power.sinapsov.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:09+00:00",
        "timestamp": "1774022409",
        "to_ids": true,
        "type": "domain",
        "uuid": "1251ef18-d7ea-4479-b0ae-f883a9876240",
        "value": "trueslak.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:09+00:00",
        "timestamp": "1774022409",
        "to_ids": false,
        "type": "url",
        "uuid": "89a6fcc8-2b0c-4bfc-bffc-02242a916254",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b598abe9631a6232afdc7824c798ac6784f55b23",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:09+00:00",
        "timestamp": "1774022409",
        "to_ids": true,
        "type": "domain",
        "uuid": "9eb1b94c-0751-46c8-a380-6e07b0a02121",
        "value": "9jaarenaxtra.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:09+00:00",
        "timestamp": "1774022409",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce3d883d-7359-4b13-b825-66ac8f19bdca",
        "value": "a6.appstartlabs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:09+00:00",
        "timestamp": "1774022409",
        "to_ids": true,
        "type": "domain",
        "uuid": "bddf46fb-888f-4191-8fd2-8578e98fa426",
        "value": "ahdaratlegalservices.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:09+00:00",
        "timestamp": "1774022410",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a82f557-71a8-44f2-9af6-d82a503fe4ec",
        "value": "zoomnutrition.appstartlabs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:10+00:00",
        "timestamp": "1774022410",
        "to_ids": false,
        "type": "url",
        "uuid": "7a1d6e97-b0e3-4567-a489-dd581a85a7f7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6671c9e742d512d9e9d0286f9ba4886e46ff59e0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:10+00:00",
        "timestamp": "1774022410",
        "to_ids": false,
        "type": "url",
        "uuid": "fc722724-2fbe-494f-ba95-9c5361100a7e",
        "value": "https://x.com/smica83/status/2035016843690152062",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:10+00:00",
        "timestamp": "1774022410",
        "to_ids": false,
        "type": "url",
        "uuid": "eead561b-b183-423c-bae1-d27cd5808422",
        "value": "https://www.virustotal.com/gui/file/1c38dde07bc7b0367f7bc0386d7f3e2b1114eb70e83f7224efc0b2b2aac09eee/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:10+00:00",
        "timestamp": "1774022410",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "33a766bc-de4c-41ca-aec1-6984cfe83da9",
        "value": "38.181.20.2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xfiles",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:10+00:00",
        "timestamp": "1774022410",
        "to_ids": false,
        "type": "url",
        "uuid": "ce4a136a-d195-4da3-a34f-2cde6bdfd016",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1dae93abc4d655d16765ac5b338b4bb93a54c1a8",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xfiles",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:10+00:00",
        "timestamp": "1774022411",
        "to_ids": false,
        "type": "url",
        "uuid": "1ce98b38-01db-42d1-b463-b1cad456fe7e",
        "value": "https://x.com/smica83/status/2035014235348938977",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xfiles",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:11+00:00",
        "timestamp": "1774022411",
        "to_ids": false,
        "type": "url",
        "uuid": "f99d65a1-cb9a-4818-979a-6c33c3e50cb9",
        "value": "https://tria.ge/260320-sqylxsay7n/behavioral1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xfiles",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:11+00:00",
        "timestamp": "1774022411",
        "to_ids": false,
        "type": "url",
        "uuid": "7ae678c0-826f-45a3-927a-00561231dd52",
        "value": "https://www.virustotal.com/gui/file/13d2b7ba30981b586b9463eddcdb7ae2d4b52f7237963e3ec504eb6485cd55a3/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xfiles",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:11+00:00",
        "timestamp": "1774022411",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b7bbcd7-8260-401f-b26a-dca96d39a85e",
        "value": "andredorethrenody.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xfiles",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:11+00:00",
        "timestamp": "1774022411",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf996e8e-0f8e-4651-a72e-eda3c8706401",
        "value": "antonellarizimthrum.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xfiles",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:11+00:00",
        "timestamp": "1774022411",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a9ca3ef-91b4-4ec2-889d-78f54b9f4c9f",
        "value": "navyfcugov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:11+00:00",
        "timestamp": "1774022411",
        "to_ids": false,
        "type": "url",
        "uuid": "25d14272-20f6-45f8-b5ae-0b1665d3fd74",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4c7e25be8fd349d6b824cfc4f5ca3857a0ff719e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:11+00:00",
        "timestamp": "1774022412",
        "to_ids": false,
        "type": "url",
        "uuid": "db696a79-9e54-426a-8043-3191b09b83a3",
        "value": "https://x.com/smica83/status/2035013178384400619",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:12+00:00",
        "timestamp": "1774022412",
        "to_ids": false,
        "type": "url",
        "uuid": "ea8b20b2-5236-4403-ac63-3855e095a47d",
        "value": "https://www.virustotal.com/gui/file/2d9435152cc275327c6f84832d4a3468ce677879cc350338f12296c276bb4227/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:12+00:00",
        "timestamp": "1774022412",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b57c1207-1e90-4668-ac20-115eb63ba455",
        "value": "156.239.14.174",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:12+00:00",
        "timestamp": "1774022412",
        "to_ids": false,
        "type": "url",
        "uuid": "82d9758c-d391-4d7b-85c2-3b606bfc3b24",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/87074a959e3a4ffb6dc705a07dfa0f3af50a6d4e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:12+00:00",
        "timestamp": "1774022412",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d5cb26a-eb29-4ef5-981f-a0a98b994174",
        "value": "0rs331gq.flowwow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:12+00:00",
        "timestamp": "1774022412",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cb48a21-f4b2-4939-8003-d04317bc81f2",
        "value": "11mfvsu.norsdwest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:12+00:00",
        "timestamp": "1774022413",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d030baa-ea21-4f50-baab-9093034be98a",
        "value": "1609tkt.slowcube.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:13+00:00",
        "timestamp": "1774022413",
        "to_ids": true,
        "type": "domain",
        "uuid": "81d70075-b44a-47bc-8889-3fa46df1dff3",
        "value": "18z4.blowoff.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:13+00:00",
        "timestamp": "1774022413",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ad4166d-b85c-4bdf-93ef-7c2470c02857",
        "value": "1ette6-graph.grosstao.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:13+00:00",
        "timestamp": "1774022413",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6972116-a74b-460b-9643-0e142c91e604",
        "value": "3pqw.farjoran.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:13+00:00",
        "timestamp": "1774022413",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bd2a5a2-ab6c-4b0d-bf18-2058e293e885",
        "value": "4agat.yardnext.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:13+00:00",
        "timestamp": "1774022413",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebd1b916-8bce-4926-8932-3f1396ba6af2",
        "value": "4ldo6v.highjoke.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:13+00:00",
        "timestamp": "1774022413",
        "to_ids": true,
        "type": "domain",
        "uuid": "082821bd-6f24-415a-8524-84464395ac63",
        "value": "58broegq.norsdwest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:13+00:00",
        "timestamp": "1774022414",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b62306b-1697-41e4-913d-7b1f8850b62a",
        "value": "5h4ll-watch.checkbro.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:14+00:00",
        "timestamp": "1774022414",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9cabae6-0d04-4208-bcc6-458cde284927",
        "value": "5hap-phase.yardnext.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:14+00:00",
        "timestamp": "1774022414",
        "to_ids": true,
        "type": "domain",
        "uuid": "15b19615-6e87-490f-a184-8e512ae5c65f",
        "value": "5ilve-vector.cokefun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:14+00:00",
        "timestamp": "1774022414",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf7ad7ce-32e8-4c67-b60f-d5ebf888f6e1",
        "value": "5umm1-forge.runfast.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:14+00:00",
        "timestamp": "1774022414",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b0044a9-bad4-41a7-81e3-ad54bf97e878",
        "value": "6xzb.inksky.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:14+00:00",
        "timestamp": "1774022414",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec1185af-4c79-485f-a76f-a85bd3ffcc9b",
        "value": "70x2ky.veloxunit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:14+00:00",
        "timestamp": "1774022415",
        "to_ids": true,
        "type": "domain",
        "uuid": "16f0b3db-5b15-45d3-a00e-536155588e19",
        "value": "853rfm15.norsdwest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:15+00:00",
        "timestamp": "1774022415",
        "to_ids": true,
        "type": "domain",
        "uuid": "c455f4af-246c-47e2-95d0-1e7618f00951",
        "value": "8vxgsoq9.cokefun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:15+00:00",
        "timestamp": "1774022415",
        "to_ids": true,
        "type": "domain",
        "uuid": "91e848c7-136f-4eb4-9e2a-8c6d7ed20a4a",
        "value": "9069srn1.flowwow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:15+00:00",
        "timestamp": "1774022415",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d897d38-8e12-4b54-995e-e8ce40b153d3",
        "value": "9ddky9.vouayger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:15+00:00",
        "timestamp": "1774022415",
        "to_ids": true,
        "type": "domain",
        "uuid": "d444eb9a-fc66-4f5e-869b-5ca840423ef6",
        "value": "a08ulcab.highjoke.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:15+00:00",
        "timestamp": "1774022415",
        "to_ids": true,
        "type": "domain",
        "uuid": "40cc42f3-4de5-42a6-b6ee-52a5a6d9564a",
        "value": "adaptver.sanfloor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:15+00:00",
        "timestamp": "1774022415",
        "to_ids": true,
        "type": "domain",
        "uuid": "46ef0a68-54ff-48c3-a73d-5d5a9daad74d",
        "value": "alt-5torag.termocenter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:15+00:00",
        "timestamp": "1774022416",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9f5e1c7-6cb9-42e1-af51-517c368eda89",
        "value": "altopoint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:16+00:00",
        "timestamp": "1774022416",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9b86c37-cb65-4067-b4c5-649c3c960a98",
        "value": "amplitudo-v.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:16+00:00",
        "timestamp": "1774022416",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce8c3259-574b-40ca-9d02-242e2795c6cb",
        "value": "api2sync.flexonode.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:16+00:00",
        "timestamp": "1774022416",
        "to_ids": true,
        "type": "domain",
        "uuid": "3119bf05-1c07-4539-8c58-40c202bc0ce4",
        "value": "api8-well.slowcube.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:16+00:00",
        "timestamp": "1774022416",
        "to_ids": true,
        "type": "domain",
        "uuid": "13486646-f048-4941-b4e8-486cd510fe2c",
        "value": "app-v09-data.faser-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:16+00:00",
        "timestamp": "1774022416",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef3ff089-bf37-447c-a07c-38b49921e4c7",
        "value": "app2data.fluxobase.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:16+00:00",
        "timestamp": "1774022417",
        "to_ids": true,
        "type": "domain",
        "uuid": "24d1a1fa-b8ca-4ac2-8fb4-6ed7ff625c95",
        "value": "arcostruttura.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:17+00:00",
        "timestamp": "1774022417",
        "to_ids": true,
        "type": "domain",
        "uuid": "af22947b-c2f7-4ef9-95cc-6ce8db2aac9d",
        "value": "arkfluxor.vouayger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:17+00:00",
        "timestamp": "1774022417",
        "to_ids": true,
        "type": "domain",
        "uuid": "8763b44d-f89b-4c10-83d5-489bbb6ce212",
        "value": "aspdos.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:17+00:00",
        "timestamp": "1774022417",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f82326e-0928-48a9-9ec4-c2320657f848",
        "value": "atomi-point.norsdwest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:17+00:00",
        "timestamp": "1774022417",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbfeb881-a33e-48df-89c8-0fbf2c754ea9",
        "value": "auth-l9-user.optimumvia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:17+00:00",
        "timestamp": "1774022417",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3c12c7b-462f-4b69-8c5c-64c5b260b40d",
        "value": "backyard.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:17+00:00",
        "timestamp": "1774022417",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e66c636-d13a-4d41-80e9-68a6e0cd04d4",
        "value": "balancepilot.grosstao.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:17+00:00",
        "timestamp": "1774022418",
        "to_ids": true,
        "type": "domain",
        "uuid": "42384392-963c-4135-865d-29cb13b5055a",
        "value": "base-f4-infra.foco-global.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:18+00:00",
        "timestamp": "1774022418",
        "to_ids": true,
        "type": "domain",
        "uuid": "260723fd-7cbc-4c28-884f-9f04e2615de5",
        "value": "base-f4-infra.optimumvia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:18+00:00",
        "timestamp": "1774022418",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccba59fb-e0c5-40c5-8f53-4e32a6e615e2",
        "value": "base-v55-steel.grandeserveur.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:18+00:00",
        "timestamp": "1774022418",
        "to_ids": true,
        "type": "domain",
        "uuid": "2aca2c77-b469-4bdc-8fef-5311489290bc",
        "value": "base-x7-infra.mondosicuro.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:18+00:00",
        "timestamp": "1774022418",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d82ec3a-2073-48c8-9bce-3312300f2e33",
        "value": "besthire.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:18+00:00",
        "timestamp": "1774022418",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f189f1a-134f-4cd8-b25c-346fff87ea99",
        "value": "biometricaix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:18+00:00",
        "timestamp": "1774022418",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e815cb9-a514-438f-9c2c-6cf5875f0040",
        "value": "blowoff.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:18+00:00",
        "timestamp": "1774022419",
        "to_ids": true,
        "type": "domain",
        "uuid": "93389efd-13da-4057-9029-2ec8eb733a42",
        "value": "bonflac.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:19+00:00",
        "timestamp": "1774022419",
        "to_ids": true,
        "type": "domain",
        "uuid": "63bcfbc2-be1a-4bb1-9dc4-68f30bbe1dad",
        "value": "boreasync.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:19+00:00",
        "timestamp": "1774022419",
        "to_ids": true,
        "type": "domain",
        "uuid": "b813069b-b076-467d-80f8-b6f91538b561",
        "value": "botslap.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:19+00:00",
        "timestamp": "1774022419",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b534e6f-d5fb-419b-a258-4f2f7f23cec4",
        "value": "branchpubli.vouayger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:19+00:00",
        "timestamp": "1774022419",
        "to_ids": true,
        "type": "domain",
        "uuid": "5edec3b8-60f3-42cb-a813-6ed40feca40c",
        "value": "c0mpi-branch.runfast.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:19+00:00",
        "timestamp": "1774022419",
        "to_ids": true,
        "type": "domain",
        "uuid": "75abbd74-732d-4410-b7a8-48e43192caf2",
        "value": "camporgani.norsdwest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:19+00:00",
        "timestamp": "1774022420",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8886720-4a0c-4cb8-beb0-5513c0424e80",
        "value": "catflat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:20+00:00",
        "timestamp": "1774022420",
        "to_ids": true,
        "type": "domain",
        "uuid": "f48bce37-a5ad-48ec-a530-26cd25215d6e",
        "value": "catflow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:20+00:00",
        "timestamp": "1774022420",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6f9dc9e-4688-4e7e-8bc1-59b34554d1a7",
        "value": "cdn-z7-edge.optico-voda.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:20+00:00",
        "timestamp": "1774022420",
        "to_ids": true,
        "type": "domain",
        "uuid": "49a77279-41e7-4b41-a64b-de32d7005c06",
        "value": "check-gate.easttea.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:20+00:00",
        "timestamp": "1774022420",
        "to_ids": true,
        "type": "domain",
        "uuid": "a937b5b6-68ca-4d4c-ab33-14011d8dcc98",
        "value": "checkbro.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:20+00:00",
        "timestamp": "1774022420",
        "to_ids": true,
        "type": "domain",
        "uuid": "9603fd64-6dbe-469d-8cf5-e5a1f5527eb3",
        "value": "cloud1store.metracore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:20+00:00",
        "timestamp": "1774022420",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc7800ea-1b0f-443a-b525-4ab533f2fe35",
        "value": "cmavixjw.devopsn.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:20+00:00",
        "timestamp": "1774022421",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc7e1b3f-9e72-4e55-8fac-078388121be8",
        "value": "cokefun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:21+00:00",
        "timestamp": "1774022421",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb2b48f4-3b36-4cfc-9404-7ea528da9f7b",
        "value": "cokenote.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:21+00:00",
        "timestamp": "1774022421",
        "to_ids": true,
        "type": "domain",
        "uuid": "51a137c3-371b-428e-9bc7-407c0d48edfd",
        "value": "columnasol.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:21+00:00",
        "timestamp": "1774022421",
        "to_ids": true,
        "type": "domain",
        "uuid": "6dff7f2b-e9fb-4c04-95c3-781ff14e0937",
        "value": "combinvignette.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:21+00:00",
        "timestamp": "1774022421",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e264937-9fb8-4f05-9184-c0c5fd0c9ccc",
        "value": "commenlegitdown.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:21+00:00",
        "timestamp": "1774022421",
        "to_ids": true,
        "type": "domain",
        "uuid": "07136c23-ac1f-4533-9a44-b4359d389d03",
        "value": "commonit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:21+00:00",
        "timestamp": "1774022422",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba840286-457d-429f-aa38-ded2595d3460",
        "value": "compres6-well.inkpit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:22+00:00",
        "timestamp": "1774022422",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fe02125-6bfb-4cd3-ba88-f28a9597aa46",
        "value": "computeinn.flowwow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:22+00:00",
        "timestamp": "1774022422",
        "to_ids": true,
        "type": "domain",
        "uuid": "72d5874d-b379-4283-8fdb-ca2f31d097d2",
        "value": "cor46-layer.grosstao.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:22+00:00",
        "timestamp": "1774022422",
        "to_ids": true,
        "type": "domain",
        "uuid": "71159928-57a6-4552-a005-748555e18636",
        "value": "core-j1-sync.faser-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:22+00:00",
        "timestamp": "1774022422",
        "to_ids": true,
        "type": "domain",
        "uuid": "feddbf02-6f05-44e1-9ffb-3f6537921c9f",
        "value": "core-x4-rock.soma-grid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:22+00:00",
        "timestamp": "1774022422",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6920e2c-a16b-4167-bbdc-033de4889ed7",
        "value": "crbn95bh.cokefun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:22+00:00",
        "timestamp": "1774022422",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd6d1689-4eb3-427a-b347-4c797d0984a4",
        "value": "cry5ta-wave.highjoke.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:23+00:00",
        "timestamp": "1774022423",
        "to_ids": true,
        "type": "domain",
        "uuid": "45b1e6fb-efb7-442c-88f8-bb60f64d1cbc",
        "value": "curvazero.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:23+00:00",
        "timestamp": "1774022423",
        "to_ids": true,
        "type": "domain",
        "uuid": "63b99dbe-b145-44af-8bee-f7d9ec88139e",
        "value": "d8-net-global.velocicorsa.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:23+00:00",
        "timestamp": "1774022423",
        "to_ids": true,
        "type": "domain",
        "uuid": "0272fd4d-8568-495b-ab27-7daf2dbe247f",
        "value": "dark-stre.dartvar.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:23+00:00",
        "timestamp": "1774022423",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac5d1919-bc77-4ef3-8e78-c5d451109e02",
        "value": "darkboll.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:23+00:00",
        "timestamp": "1774022423",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc0d84a2-07b9-4489-847d-7faae4acb96a",
        "value": "dartvar.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:23+00:00",
        "timestamp": "1774022423",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cde647c-35a7-4d0b-8e62-456274705063",
        "value": "dashcloud.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:23+00:00",
        "timestamp": "1774022424",
        "to_ids": true,
        "type": "domain",
        "uuid": "83017e07-627d-4531-9a57-cae13263c189",
        "value": "data3sync.nuxbase.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:24+00:00",
        "timestamp": "1774022424",
        "to_ids": true,
        "type": "domain",
        "uuid": "99280541-ef80-4e01-bc20-b5e7c73e0eb2",
        "value": "dealunderhand.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:24+00:00",
        "timestamp": "1774022424",
        "to_ids": true,
        "type": "domain",
        "uuid": "47db0103-4163-42be-b047-e9e3acd1e7e0",
        "value": "deepasset.stabletu.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:24+00:00",
        "timestamp": "1774022424",
        "to_ids": true,
        "type": "domain",
        "uuid": "b08bacdc-88db-465b-b2f6-7af9620175a1",
        "value": "delive-crest.catflat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:24+00:00",
        "timestamp": "1774022424",
        "to_ids": true,
        "type": "domain",
        "uuid": "5636da59-f0e5-4c20-a0c7-887da67c6929",
        "value": "densa-materia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:24+00:00",
        "timestamp": "1774022424",
        "to_ids": true,
        "type": "domain",
        "uuid": "20c039b3-e8d2-4fbc-9bad-3754d695cc90",
        "value": "densapoint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:24+00:00",
        "timestamp": "1774022424",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ff67e0a-cea4-4988-9551-d7307eea6868",
        "value": "dev-x44-host.petittravail.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:24+00:00",
        "timestamp": "1774022425",
        "to_ids": true,
        "type": "domain",
        "uuid": "de817cd3-b5c8-4405-bb62-6cf3a1c2c1a7",
        "value": "dev3host.metracore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:25+00:00",
        "timestamp": "1774022425",
        "to_ids": true,
        "type": "domain",
        "uuid": "d12be2e7-3214-4b10-96ed-4648b2036a66",
        "value": "devopsn.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:25+00:00",
        "timestamp": "1774022425",
        "to_ids": true,
        "type": "domain",
        "uuid": "f549d4a5-0cc5-4828-b6cc-b265376eda7d",
        "value": "disruptscale.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:25+00:00",
        "timestamp": "1774022425",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d0bead3-155d-4521-828f-1f9ecac66189",
        "value": "dist-z02-edge.ponteluna.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:25+00:00",
        "timestamp": "1774022425",
        "to_ids": true,
        "type": "domain",
        "uuid": "b454d14a-8d3c-46e3-a069-fb87dd27e914",
        "value": "domprot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:25+00:00",
        "timestamp": "1774022425",
        "to_ids": true,
        "type": "domain",
        "uuid": "31290f50-74ec-43bf-854b-78670462fca4",
        "value": "driveouter.yardnext.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:25+00:00",
        "timestamp": "1774022425",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f6f57ce-df41-4a07-a5c9-8c6ed0acc2fb",
        "value": "durogrid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:26+00:00",
        "timestamp": "1774022426",
        "to_ids": true,
        "type": "domain",
        "uuid": "a50b89eb-eae0-4817-9535-2ecbee4ec11f",
        "value": "duronodo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:26+00:00",
        "timestamp": "1774022426",
        "to_ids": true,
        "type": "domain",
        "uuid": "e02687b3-b1e9-4680-921a-abdeb38c2dd9",
        "value": "dyn-lithon.slowcube.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:26+00:00",
        "timestamp": "1774022426",
        "to_ids": true,
        "type": "domain",
        "uuid": "34917dfa-2251-43ec-a309-fd2b25864cf4",
        "value": "dynvenos7.vouayger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:26+00:00",
        "timestamp": "1774022426",
        "to_ids": true,
        "type": "domain",
        "uuid": "8425c67a-974d-4fe0-89bb-38f61e7744d3",
        "value": "easttea.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:26+00:00",
        "timestamp": "1774022426",
        "to_ids": true,
        "type": "domain",
        "uuid": "fecf4fa9-4d0d-4cd0-a25a-d5400919e501",
        "value": "ewt2o.catflat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:26+00:00",
        "timestamp": "1774022426",
        "to_ids": true,
        "type": "domain",
        "uuid": "29fa9b21-f82e-4ce3-99f7-7827044f64da",
        "value": "f2-gate-v0.navispazio.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:26+00:00",
        "timestamp": "1774022427",
        "to_ids": true,
        "type": "domain",
        "uuid": "77718d6f-c734-4fe0-9120-b97c8719d594",
        "value": "f41th8-spark.flowwow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:27+00:00",
        "timestamp": "1774022427",
        "to_ids": true,
        "type": "domain",
        "uuid": "c94a56f5-8db0-4812-8d7a-a867821ac198",
        "value": "farjoran.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:27+00:00",
        "timestamp": "1774022427",
        "to_ids": true,
        "type": "domain",
        "uuid": "66a042e4-9483-4fd1-8293-63e96a29b115",
        "value": "faser-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:27+00:00",
        "timestamp": "1774022427",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e77e5cb-a515-40fd-b0ec-75f02bfdecdd",
        "value": "fastpink.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:27+00:00",
        "timestamp": "1774022427",
        "to_ids": true,
        "type": "domain",
        "uuid": "e24acb3d-bb19-45ed-abce-a74bc62f61cb",
        "value": "ferroviva.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:27+00:00",
        "timestamp": "1774022427",
        "to_ids": true,
        "type": "domain",
        "uuid": "12b3b62d-0f15-488b-96ee-02add44b80db",
        "value": "field-z5-vast.silberstromx.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:27+00:00",
        "timestamp": "1774022427",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8685e0b-5ce4-40ac-8ad2-0453ce10ba70",
        "value": "fina1-hold.woodflo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:27+00:00",
        "timestamp": "1774022428",
        "to_ids": true,
        "type": "domain",
        "uuid": "90e16849-4ae9-4c77-8e40-752829a90df9",
        "value": "flexonode.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:28+00:00",
        "timestamp": "1774022428",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb969b55-ed20-459e-886f-55f65a4074db",
        "value": "flow-z9-work.punto-viva.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:28+00:00",
        "timestamp": "1774022428",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba448c79-d74f-437a-a048-ef5b3f2939bc",
        "value": "flow4work.densapoint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:28+00:00",
        "timestamp": "1774022428",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd2a3f8a-ad74-4b67-935f-93d663399508",
        "value": "flowwow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:28+00:00",
        "timestamp": "1774022428",
        "to_ids": true,
        "type": "domain",
        "uuid": "6004f0ec-2697-4ac5-9c30-0e974570fb71",
        "value": "fluidicoview.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:28+00:00",
        "timestamp": "1774022428",
        "to_ids": true,
        "type": "domain",
        "uuid": "26c2b361-76eb-4339-af56-719fe342d2a2",
        "value": "fluxobase.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:28+00:00",
        "timestamp": "1774022428",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e201e6f-676a-45f2-89f0-c71a689cef35",
        "value": "foco-global.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:29+00:00",
        "timestamp": "1774022429",
        "to_ids": true,
        "type": "domain",
        "uuid": "240524f9-8c6b-4292-9fa8-ac4852764b85",
        "value": "focozero.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:29+00:00",
        "timestamp": "1774022429",
        "to_ids": true,
        "type": "domain",
        "uuid": "b332f143-de45-4c59-8c73-f6eec95f176e",
        "value": "fossaflow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:29+00:00",
        "timestamp": "1774022429",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ff25f01-9ac4-41d1-8a6a-d307094f3dc0",
        "value": "framsun.grosstao.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:29+00:00",
        "timestamp": "1774022429",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e6118f2-2acc-4a76-8f6a-a1df6b5ae698",
        "value": "fumedigitale.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:29+00:00",
        "timestamp": "1774022429",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0f2d0e7-fec7-43ba-becf-84a533e3c852",
        "value": "gard-cano.catflat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:29+00:00",
        "timestamp": "1774022429",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f0c7c50-a0b3-4d64-a49b-158f082e4c5e",
        "value": "gat3wa-craft.slowcube.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:29+00:00",
        "timestamp": "1774022430",
        "to_ids": true,
        "type": "domain",
        "uuid": "94f7d4b1-8048-4cf7-bd4c-2e6fad100c6b",
        "value": "gate-v5-entry.densa-materia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:30+00:00",
        "timestamp": "1774022430",
        "to_ids": true,
        "type": "domain",
        "uuid": "442802f5-cb74-41a8-8ffa-198df08440d5",
        "value": "gate-v7-entry.veloxfundo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:30+00:00",
        "timestamp": "1774022430",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a22231c-9dcc-4f52-9ef1-a2052e6907ed",
        "value": "gate-x1-proxy.vortex-lab.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:30+00:00",
        "timestamp": "1774022430",
        "to_ids": true,
        "type": "domain",
        "uuid": "f24d3d6a-2334-48ff-b6e1-7144b2b99db0",
        "value": "gate-x3-proxy.metallopunto.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:30+00:00",
        "timestamp": "1774022430",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d5d63f5-95bb-4bf8-9a59-dddf00fd7f15",
        "value": "gate2proxy.nuxbase.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:30+00:00",
        "timestamp": "1774022430",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e3044de-6d13-4680-8d5f-d1ea5c31b663",
        "value": "gate3proxy.fluxobase.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:30+00:00",
        "timestamp": "1774022430",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab35eeb7-8de8-499f-a204-786ac069488c",
        "value": "gate3proxy.vivaflux.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:30+00:00",
        "timestamp": "1774022431",
        "to_ids": true,
        "type": "domain",
        "uuid": "25478c8f-052d-4cf9-b132-94ffe1ee84c4",
        "value": "gent1-core.gramsup.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:31+00:00",
        "timestamp": "1774022431",
        "to_ids": true,
        "type": "domain",
        "uuid": "18bed4e4-9441-4ab7-969b-9d1b06627203",
        "value": "geo-4irw.grosstao.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:31+00:00",
        "timestamp": "1774022431",
        "to_ids": true,
        "type": "domain",
        "uuid": "b97f9001-1c7c-472f-9b32-975c13b30013",
        "value": "geo-f0x.inkpit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:31+00:00",
        "timestamp": "1774022431",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d863e67-769d-4b4e-affc-79a071ad308c",
        "value": "ghost3node.luxalabs.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:31+00:00",
        "timestamp": "1774022431",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f96a716-46b5-47bd-844f-74eead1ccb39",
        "value": "gig0wg7.tempiso.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:31+00:00",
        "timestamp": "1774022431",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4ee88f2-9807-41ba-8cdf-2b0c5e1ce230",
        "value": "glob1infra.optigrid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:31+00:00",
        "timestamp": "1774022432",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4a0c23b-aa82-4764-ada7-d00837a56444",
        "value": "goldpeak.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:32+00:00",
        "timestamp": "1774022432",
        "to_ids": true,
        "type": "domain",
        "uuid": "568d170a-3f63-4765-9b3b-2be64e36ffef",
        "value": "goo8039f.catflat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:32+00:00",
        "timestamp": "1774022432",
        "to_ids": true,
        "type": "domain",
        "uuid": "037ebf1f-2552-4384-911c-96b80657ff56",
        "value": "gr0ve7-loop.gramsup.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:32+00:00",
        "timestamp": "1774022432",
        "to_ids": true,
        "type": "domain",
        "uuid": "15ecc585-c951-45bb-af37-bf03f96c5af0",
        "value": "gramsup.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:32+00:00",
        "timestamp": "1774022432",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ec2db90-0633-455c-8095-23f1ee5e6b75",
        "value": "grandeserveur.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:32+00:00",
        "timestamp": "1774022432",
        "to_ids": true,
        "type": "domain",
        "uuid": "05c40db3-a967-44a3-a277-0f7de7233473",
        "value": "grandevitesse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:32+00:00",
        "timestamp": "1774022432",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9331978-6ff9-42bc-945b-c7d4b88182ea",
        "value": "gronstat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:32+00:00",
        "timestamp": "1774022433",
        "to_ids": true,
        "type": "domain",
        "uuid": "e414be20-cb67-4e73-b03d-9cd4f97fd14c",
        "value": "grosstao.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:33+00:00",
        "timestamp": "1774022433",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a29c832-a5c2-4468-a827-35ed710ab425",
        "value": "gu1d-phase.bonflac.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:33+00:00",
        "timestamp": "1774022433",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a80b555-1b54-4777-a875-a56920088fcb",
        "value": "gulagnivhi.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:33+00:00",
        "timestamp": "1774022433",
        "to_ids": true,
        "type": "domain",
        "uuid": "768e8122-90a1-4818-9e13-b35af3be8600",
        "value": "h1-sync-data.ferroviva.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:33+00:00",
        "timestamp": "1774022433",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a37d89b-1b4e-481c-9ab3-d8954a0ddcdc",
        "value": "h3-hub-local.ombragrigia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:33+00:00",
        "timestamp": "1774022433",
        "to_ids": true,
        "type": "domain",
        "uuid": "58a9a009-7cd5-47f0-bc75-43452ff20eee",
        "value": "h4-node-00.pietraforte.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:33+00:00",
        "timestamp": "1774022434",
        "to_ids": true,
        "type": "domain",
        "uuid": "74119177-18f2-4dc4-b745-5c3bf93f0464",
        "value": "hardclear.slowcube.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:34+00:00",
        "timestamp": "1774022434",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8b05065-e3ba-4431-8b8f-0da2699d7d95",
        "value": "heatonlight.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:34+00:00",
        "timestamp": "1774022434",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c0fb2f9-e1e2-45d7-907a-addef6139b30",
        "value": "hfcn.backyard.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:34+00:00",
        "timestamp": "1774022434",
        "to_ids": true,
        "type": "domain",
        "uuid": "d40a443e-fdb6-4f75-af9d-0ac0c2d86fd5",
        "value": "hidden-panel.aspdos.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:34+00:00",
        "timestamp": "1774022434",
        "to_ids": true,
        "type": "domain",
        "uuid": "a59c989c-9c32-4915-b566-14ae7507ca9c",
        "value": "highjoke.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:34+00:00",
        "timestamp": "1774022434",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ed52bed-c76a-44b3-8046-dffd699a088b",
        "value": "hub-v02-local.punto-viva.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:34+00:00",
        "timestamp": "1774022434",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7fa0e01-9f0d-423d-9832-d379481c91f1",
        "value": "hub4sync.vivaflux.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:34+00:00",
        "timestamp": "1774022435",
        "to_ids": true,
        "type": "domain",
        "uuid": "d55ee29a-bbcd-4241-b8b4-f0723e978bb0",
        "value": "i1-vision-sync.duronodo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:35+00:00",
        "timestamp": "1774022435",
        "to_ids": true,
        "type": "domain",
        "uuid": "087767be-e78f-457e-9c32-a8b3780dc17f",
        "value": "ice-han.slowcube.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:35+00:00",
        "timestamp": "1774022435",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d2cedda-3dcc-4fc2-923b-231af8582013",
        "value": "importlejeb.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:35+00:00",
        "timestamp": "1774022435",
        "to_ids": true,
        "type": "domain",
        "uuid": "51ed6db9-ac4e-4290-b191-8a8972605513",
        "value": "infra-v3-sync.schnellnetz.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:35+00:00",
        "timestamp": "1774022435",
        "to_ids": true,
        "type": "domain",
        "uuid": "20815428-822a-4eb2-939e-cf00f4a8177e",
        "value": "infravariable.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:35+00:00",
        "timestamp": "1774022435",
        "to_ids": true,
        "type": "domain",
        "uuid": "43c76b2d-4987-4e05-a2d4-5aa57a236ccb",
        "value": "inkpit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:35+00:00",
        "timestamp": "1774022436",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3596f22-0748-4200-a971-e8e3d09275ea",
        "value": "inksky.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:36+00:00",
        "timestamp": "1774022436",
        "to_ids": true,
        "type": "domain",
        "uuid": "68d04e3e-beb2-40f2-8b49-447cd71bfb51",
        "value": "islbay.gramsup.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:36+00:00",
        "timestamp": "1774022436",
        "to_ids": true,
        "type": "domain",
        "uuid": "398724b4-004e-46ae-a32d-3948c166804c",
        "value": "j1-flow-work.ombragrigia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:36+00:00",
        "timestamp": "1774022436",
        "to_ids": true,
        "type": "domain",
        "uuid": "d31d51ac-d530-4d57-854e-c45ba93789a2",
        "value": "jokerun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:36+00:00",
        "timestamp": "1774022436",
        "to_ids": true,
        "type": "domain",
        "uuid": "3624a492-9028-4824-84b4-8ad96b3aad70",
        "value": "k4-sync-auth.ventonovo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:36+00:00",
        "timestamp": "1774022436",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ed2004e-a462-41d2-ae7e-157646cb8797",
        "value": "k56gfm6.tempiso.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:36+00:00",
        "timestamp": "1774022436",
        "to_ids": true,
        "type": "domain",
        "uuid": "e854b82f-45de-430b-9d78-2f36f76dbf1c",
        "value": "kel-tideen.tunetwo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:36+00:00",
        "timestamp": "1774022437",
        "to_ids": true,
        "type": "domain",
        "uuid": "793d57f4-a80f-4d0c-b0e0-3dcec15e8b48",
        "value": "keldraix.cokefun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:37+00:00",
        "timestamp": "1774022437",
        "to_ids": true,
        "type": "domain",
        "uuid": "66e79104-57b3-449c-8847-80d7b9b4a38a",
        "value": "kelvalear3.jokerun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:37+00:00",
        "timestamp": "1774022437",
        "to_ids": true,
        "type": "domain",
        "uuid": "7896335b-ab8b-415f-98b3-dfe054ac8ea7",
        "value": "l0-main-v7.navispazio.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:37+00:00",
        "timestamp": "1774022437",
        "to_ids": true,
        "type": "domain",
        "uuid": "080a0d9f-e1fd-4282-877b-f2d8f92fac51",
        "value": "lattvisua.runfast.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:37+00:00",
        "timestamp": "1774022437",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e16678e-8485-4c5d-9800-a351574fa104",
        "value": "launchprocess.slowcube.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:37+00:00",
        "timestamp": "1774022437",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc223796-d3ce-463b-9cd6-ed384cea8fcc",
        "value": "layouprin.highjoke.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:37+00:00",
        "timestamp": "1774022438",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b8c6625-b45a-4ddf-9f59-16d4c9f6337c",
        "value": "lb2power.orbitunit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:38+00:00",
        "timestamp": "1774022438",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae50db6c-2ac7-46ee-9026-9cf688846109",
        "value": "lgd9j832.devopsn.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:38+00:00",
        "timestamp": "1774022438",
        "to_ids": true,
        "type": "domain",
        "uuid": "2db7542e-2e26-4105-b2ed-edc282e0a30f",
        "value": "link-p1-power.punto-viva.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:38+00:00",
        "timestamp": "1774022438",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdb7ff47-925b-4bc7-9c2f-0261a2b97d0c",
        "value": "link-z0-sat.grandeserveur.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:38+00:00",
        "timestamp": "1774022438",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6c041dd-f5f0-4609-aec8-6b0e27ae030a",
        "value": "link4access.durogrid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:38+00:00",
        "timestamp": "1774022438",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8d40f73-aed7-4929-801f-f5dbbccacd52",
        "value": "load3host.vectorstorage.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:38+00:00",
        "timestamp": "1774022439",
        "to_ids": true,
        "type": "domain",
        "uuid": "eac5d208-9625-4c50-b52a-ccdb4de31084",
        "value": "lumen-nodo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:39+00:00",
        "timestamp": "1774022439",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fcfc7fb-f2aa-43ee-b65d-47db2c1fbc08",
        "value": "lumenlabs.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:39+00:00",
        "timestamp": "1774022439",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2ad3d02-6e59-4bdc-92ed-2335211ddaa8",
        "value": "lumtide7ex.devopsn.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:39+00:00",
        "timestamp": "1774022439",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dfc6276-8e2f-4995-be58-4a53eac9f812",
        "value": "luxalabs.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:39+00:00",
        "timestamp": "1774022439",
        "to_ids": true,
        "type": "domain",
        "uuid": "d807861c-5e82-4883-bd19-70e1a0a01826",
        "value": "lxphm9.vouayger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:39+00:00",
        "timestamp": "1774022439",
        "to_ids": true,
        "type": "domain",
        "uuid": "337114b0-a357-4086-88d7-e0379a04f712",
        "value": "lyadwhimsical.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:39+00:00",
        "timestamp": "1774022439",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4c7eac2-01da-45f4-bf25-fe741fcec68b",
        "value": "m0pfvcb.dashcloud.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:39+00:00",
        "timestamp": "1774022440",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c6911a9-0ce4-4590-b7b1-f73e6022f511",
        "value": "m2-infra-b4.versicodex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:40+00:00",
        "timestamp": "1774022440",
        "to_ids": true,
        "type": "domain",
        "uuid": "70a474f8-e7b5-4ff8-b158-b9f62e00d3cf",
        "value": "m5-vision-9.columnasol.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:40+00:00",
        "timestamp": "1774022440",
        "to_ids": true,
        "type": "domain",
        "uuid": "9deb74e8-dfc6-44a9-830e-fc16fdf09805",
        "value": "m8-app-unit.arcostruttura.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:40+00:00",
        "timestamp": "1774022440",
        "to_ids": true,
        "type": "domain",
        "uuid": "409bc583-65fe-4928-ba0b-2dd7475abd0e",
        "value": "main-v9-point.metalloarea.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:40+00:00",
        "timestamp": "1774022440",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5d3e0df-3d9b-44ff-8d8b-424838eea952",
        "value": "main4point.lumenlabs.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:40+00:00",
        "timestamp": "1774022440",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6f5855f-cd10-4dd7-b8a0-59c1a2c32e25",
        "value": "markterminal.grosstao.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:40+00:00",
        "timestamp": "1774022440",
        "to_ids": true,
        "type": "domain",
        "uuid": "e538f61c-0e18-4491-bd7e-1afa8a6bfa9d",
        "value": "measurecircu.blowoff.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:41+00:00",
        "timestamp": "1774022441",
        "to_ids": true,
        "type": "domain",
        "uuid": "cec5d2ed-277c-4e89-894d-e42ce404bbdf",
        "value": "memorybay.aspdos.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:41+00:00",
        "timestamp": "1774022441",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d0bf823-066e-41c3-849d-8628751ca7b4",
        "value": "mer-drais.cokenote.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:41+00:00",
        "timestamp": "1774022441",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ed5073a-c15b-4586-86ae-c25c2a00537e",
        "value": "mermeshum5.flowwow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:41+00:00",
        "timestamp": "1774022441",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e5a66b7-2357-4333-b8a0-c6a8a845b6a5",
        "value": "metalloarea.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:41+00:00",
        "timestamp": "1774022441",
        "to_ids": true,
        "type": "domain",
        "uuid": "731efff9-69e9-4901-9a7e-d46c1b3a72f3",
        "value": "metallopunto.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:41+00:00",
        "timestamp": "1774022441",
        "to_ids": true,
        "type": "domain",
        "uuid": "300918e7-c943-426b-8715-d5aa234a75d6",
        "value": "metracore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:41+00:00",
        "timestamp": "1774022442",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cda34d0-0a40-40a8-8beb-4e1bc6db4504",
        "value": "mon1point.densapoint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:42+00:00",
        "timestamp": "1774022442",
        "to_ids": true,
        "type": "domain",
        "uuid": "5538b15c-4a6a-437e-ad25-40eb667ff462",
        "value": "mona.termocenter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:42+00:00",
        "timestamp": "1774022442",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f6221ce-20fd-4540-a029-3f3a91fb83ce",
        "value": "mondosicuro.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:42+00:00",
        "timestamp": "1774022442",
        "to_ids": true,
        "type": "domain",
        "uuid": "0573e7da-bb65-4db5-9902-07a5fa395976",
        "value": "moonpine.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:42+00:00",
        "timestamp": "1774022442",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bf1045d-2bcb-423f-aacf-9a0baed1fe8f",
        "value": "multispectral.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:42+00:00",
        "timestamp": "1774022442",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ba51d0a-39f1-4e99-b31e-e08628e36c51",
        "value": "n4-bridge-z.fossaflow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:42+00:00",
        "timestamp": "1774022443",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d94a77b-6056-4890-a5a7-6d539dfc39a7",
        "value": "n7-core-db.terrafirma.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:43+00:00",
        "timestamp": "1774022443",
        "to_ids": true,
        "type": "domain",
        "uuid": "8afb5a96-bd34-42f7-8bef-a3356da8165a",
        "value": "navispazio.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:43+00:00",
        "timestamp": "1774022443",
        "to_ids": true,
        "type": "domain",
        "uuid": "13a1ed64-0785-4072-9c81-bdf316fbb687",
        "value": "net-v88-global.foco-global.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:43+00:00",
        "timestamp": "1774022443",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ed334b3-1f01-45a9-891e-a65f0b5d328f",
        "value": "neutrometric.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:43+00:00",
        "timestamp": "1774022443",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bfbf1b6-50ad-4319-a3c6-b631b1014194",
        "value": "nirnb-node.runfast.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:43+00:00",
        "timestamp": "1774022443",
        "to_ids": true,
        "type": "domain",
        "uuid": "17bd804f-4d6b-4175-a895-82e442111cb2",
        "value": "nnzyf2.veloxunit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:43+00:00",
        "timestamp": "1774022443",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e67cf21-ddf4-476e-b9b4-5a3ae9f42239",
        "value": "node2flow.veloxunit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:43+00:00",
        "timestamp": "1774022444",
        "to_ids": true,
        "type": "domain",
        "uuid": "734a59ba-d1c3-4adc-8b84-026751d6b42f",
        "value": "norlineis2.fastpink.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:44+00:00",
        "timestamp": "1774022444",
        "to_ids": true,
        "type": "domain",
        "uuid": "80a073fb-5592-4cab-a776-f3dd7751d6ce",
        "value": "norsdwest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:44+00:00",
        "timestamp": "1774022444",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c8697f3-1389-4e89-85bf-cb422da62bf5",
        "value": "notifi-vault.cokenote.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:44+00:00",
        "timestamp": "1774022444",
        "to_ids": true,
        "type": "domain",
        "uuid": "d433fa69-527b-49ba-a6db-d34c464d32e0",
        "value": "nqsl.catflat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:44+00:00",
        "timestamp": "1774022444",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f8955e0-dc6e-4a11-9482-adc6a9634bd3",
        "value": "nuxbase.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:44+00:00",
        "timestamp": "1774022444",
        "to_ids": true,
        "type": "domain",
        "uuid": "b01fb658-6087-405c-a97c-b4261b7873dc",
        "value": "nuxflow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:44+00:00",
        "timestamp": "1774022445",
        "to_ids": true,
        "type": "domain",
        "uuid": "27ebb6f8-0213-4e64-bc69-6725f022f370",
        "value": "oakford.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:45+00:00",
        "timestamp": "1774022445",
        "to_ids": true,
        "type": "domain",
        "uuid": "f769ae64-973c-4eea-bbc0-4c7371894e59",
        "value": "octagonon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:45+00:00",
        "timestamp": "1774022445",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8db7787-6c09-440d-9078-b0dc8d27ec64",
        "value": "oewl.yardnext.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:45+00:00",
        "timestamp": "1774022445",
        "to_ids": true,
        "type": "domain",
        "uuid": "466aab94-fd8e-4dbd-859b-e77a185055ee",
        "value": "ombragrigia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:45+00:00",
        "timestamp": "1774022445",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a19c06b-d9ad-46a7-89ca-4c8335e1d403",
        "value": "optico-voda.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:45+00:00",
        "timestamp": "1774022445",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b171ab8-02e2-4456-97c9-53b53d4f18a9",
        "value": "opticwin.jokerun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:45+00:00",
        "timestamp": "1774022445",
        "to_ids": true,
        "type": "domain",
        "uuid": "16a2dff6-9094-4c5e-93e5-4df6c4f1870d",
        "value": "optigrid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:46+00:00",
        "timestamp": "1774022446",
        "to_ids": true,
        "type": "domain",
        "uuid": "28ae4574-76c0-44cc-869e-997bdb8859c5",
        "value": "optimumvia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:46+00:00",
        "timestamp": "1774022446",
        "to_ids": true,
        "type": "domain",
        "uuid": "729b7a10-696f-429c-89af-6154400b54c5",
        "value": "orbit-z01-moon.soma-grid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:46+00:00",
        "timestamp": "1774022446",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b75290c-cc14-46af-bd48-204609d2dd0f",
        "value": "orbitunit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:46+00:00",
        "timestamp": "1774022446",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c2682cf-fc0e-4403-b35e-0ab594726dfb",
        "value": "orch3st-plate.gramsup.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:46+00:00",
        "timestamp": "1774022446",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd9df1e1-026d-4f33-bae9-2aba56fa528a",
        "value": "orientovault.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:46+00:00",
        "timestamp": "1774022446",
        "to_ids": true,
        "type": "domain",
        "uuid": "839c20a7-0a1a-4c7c-8def-fedb802b4c4a",
        "value": "packetpuls.gramsup.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:46+00:00",
        "timestamp": "1774022447",
        "to_ids": true,
        "type": "domain",
        "uuid": "0db2c335-d812-4f7b-bdad-f9ca4f23b843",
        "value": "petalcra.catflat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:47+00:00",
        "timestamp": "1774022447",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4c178ec-b802-430e-bb45-200537487fce",
        "value": "petittravail.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:47+00:00",
        "timestamp": "1774022447",
        "to_ids": true,
        "type": "domain",
        "uuid": "01bf4f96-20be-41f2-baf8-66fb0cddf1fb",
        "value": "pietraforte.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:47+00:00",
        "timestamp": "1774022447",
        "to_ids": true,
        "type": "domain",
        "uuid": "04c6b714-3f3d-4f68-b150-df830c192edf",
        "value": "point-v91-power.starkewahl.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:47+00:00",
        "timestamp": "1774022447",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff0bf6ef-9904-492c-8783-cf8e1b22c0b9",
        "value": "ponteluna.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:47+00:00",
        "timestamp": "1774022447",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a6ba69b-8eed-4d32-8b9b-b0f3abdaf0ac",
        "value": "primanode.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:47+00:00",
        "timestamp": "1774022448",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f4e1543-11fa-4238-85a2-dc4875c558dc",
        "value": "primasfera.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:48+00:00",
        "timestamp": "1774022448",
        "to_ids": true,
        "type": "domain",
        "uuid": "70419404-0412-42af-91ba-93c80c5dce8c",
        "value": "primecel.grosstao.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:48+00:00",
        "timestamp": "1774022448",
        "to_ids": true,
        "type": "domain",
        "uuid": "e856b6ce-1d7c-40e2-abe5-7debbbe96d59",
        "value": "proc1point.systemresource.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:48+00:00",
        "timestamp": "1774022448",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b0a13b5-e4fa-46de-8d92-8c7782ad8640",
        "value": "proto-4dapter.dartvar.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:48+00:00",
        "timestamp": "1774022448",
        "to_ids": true,
        "type": "domain",
        "uuid": "588b40ea-fdb4-47c5-b25f-9b85ee2da74c",
        "value": "proto-ed1t.tempiso.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:48+00:00",
        "timestamp": "1774022448",
        "to_ids": true,
        "type": "domain",
        "uuid": "c43a523e-b032-4066-a649-98954cc2d157",
        "value": "protovoda.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:48+00:00",
        "timestamp": "1774022449",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f429862-e37e-4fc3-b5f6-0d9d15c28745",
        "value": "punto-viva.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:49+00:00",
        "timestamp": "1774022449",
        "to_ids": true,
        "type": "domain",
        "uuid": "290e81f6-149e-4881-abd0-316d1a069a25",
        "value": "q4-dev-host.terralibre.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:49+00:00",
        "timestamp": "1774022449",
        "to_ids": true,
        "type": "domain",
        "uuid": "3363b204-967a-4d1d-afc8-66090a2ed38c",
        "value": "r2-gate-entry.terralibre.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:49+00:00",
        "timestamp": "1774022449",
        "to_ids": true,
        "type": "domain",
        "uuid": "b41d274f-5c7f-4a33-8034-bb354ec7e914",
        "value": "raibark.highjoke.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:49+00:00",
        "timestamp": "1774022449",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbf9886d-01ab-4ad7-99eb-678714f16e52",
        "value": "ratflat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:49+00:00",
        "timestamp": "1774022449",
        "to_ids": true,
        "type": "domain",
        "uuid": "a269b127-5567-469f-abb8-4a14a25e79d4",
        "value": "rav3n-sync.gramsup.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:49+00:00",
        "timestamp": "1774022450",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c837a3b-8b0c-4cf1-8454-29745990977f",
        "value": "registar.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:50+00:00",
        "timestamp": "1774022450",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2e5bbb5-ba93-4b7a-9328-cf11c5819ee4",
        "value": "remotenetwork.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:50+00:00",
        "timestamp": "1774022450",
        "to_ids": true,
        "type": "domain",
        "uuid": "dae6b10d-1c2f-4558-b560-775f3882f0ae",
        "value": "rim-k12-outer.lumen-nodo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:50+00:00",
        "timestamp": "1774022450",
        "to_ids": true,
        "type": "domain",
        "uuid": "14c9127c-170e-4f14-85d6-68a56d1d3b4f",
        "value": "rn1x-mesh.catflow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:50+00:00",
        "timestamp": "1774022450",
        "to_ids": true,
        "type": "domain",
        "uuid": "00c2547c-7db1-4741-8ea7-47ef5bbff58b",
        "value": "rock3core.termocenter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:50+00:00",
        "timestamp": "1774022450",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fbfe473-37b4-4bd6-9fc5-2b13beb83bac",
        "value": "room-v51-dark.terra-data.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:50+00:00",
        "timestamp": "1774022451",
        "to_ids": true,
        "type": "domain",
        "uuid": "daa2d7e5-e1d4-4906-853d-c49879c30b2e",
        "value": "roughancho.tempiso.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:51+00:00",
        "timestamp": "1774022451",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f384cd9-aaaa-4ce0-b4b6-8cacf8b75b64",
        "value": "rpc2remote.metracore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:51+00:00",
        "timestamp": "1774022451",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2a59f31-311d-4f53-a30e-80d3f1833b3a",
        "value": "runfast.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:51+00:00",
        "timestamp": "1774022451",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d965663-fd2f-43c8-82fb-c05a532ad8c6",
        "value": "runwayanc.worldwde.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:51+00:00",
        "timestamp": "1774022451",
        "to_ids": true,
        "type": "domain",
        "uuid": "3122edc7-2bb7-4430-89e3-b02fdf38d7b4",
        "value": "s0ft6-line.devopsn.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:51+00:00",
        "timestamp": "1774022451",
        "to_ids": true,
        "type": "domain",
        "uuid": "13697d2b-0d26-4e15-be6f-1b4cdb046e3c",
        "value": "s3cre-plate.highjoke.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:51+00:00",
        "timestamp": "1774022451",
        "to_ids": true,
        "type": "domain",
        "uuid": "1be4d692-9cfb-4b8b-93c2-d6ce95ba3d7b",
        "value": "s71frp.stabletu.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:51+00:00",
        "timestamp": "1774022452",
        "to_ids": true,
        "type": "domain",
        "uuid": "92f7e190-da9c-4c21-9fe5-509f4426d35b",
        "value": "s9-sys-monitor.ombragrigia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:52+00:00",
        "timestamp": "1774022452",
        "to_ids": true,
        "type": "domain",
        "uuid": "d56bc9f1-a578-450f-87dd-85a3f42f6f15",
        "value": "sanfloor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:52+00:00",
        "timestamp": "1774022452",
        "to_ids": true,
        "type": "domain",
        "uuid": "9de0cd75-5ec9-4beb-82a0-fbc724bda6fa",
        "value": "sat4link.termocenter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:52+00:00",
        "timestamp": "1774022452",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea06a738-7738-46dc-b94b-3d45a95e29af",
        "value": "schnellnetz.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:52+00:00",
        "timestamp": "1774022452",
        "to_ids": true,
        "type": "domain",
        "uuid": "11830828-e312-48bb-abc9-056b30d473df",
        "value": "scrollnft.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:52+00:00",
        "timestamp": "1774022452",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1920ad7-999a-4f49-bc5f-9cc8fcbc60e8",
        "value": "secureimport.vouayger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:52+00:00",
        "timestamp": "1774022453",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3a5d6bc-4198-414f-9d2f-309644df755a",
        "value": "serlineal8.inkpit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:53+00:00",
        "timestamp": "1774022453",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f5ff838-2b4e-4cf9-b184-816ae9aec95f",
        "value": "shad6-scope.registar.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:53+00:00",
        "timestamp": "1774022453",
        "to_ids": true,
        "type": "domain",
        "uuid": "e42d2815-406d-4b4f-9add-09c6d7f7cd2a",
        "value": "shell-t5-core.primasfera.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:53+00:00",
        "timestamp": "1774022453",
        "to_ids": true,
        "type": "domain",
        "uuid": "718bfa6a-1b6e-4d4f-9dbd-47a5633931ca",
        "value": "shell2core.luxalabs.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:53+00:00",
        "timestamp": "1774022453",
        "to_ids": true,
        "type": "domain",
        "uuid": "acf52042-4ac2-4974-9ed2-ef4f3fef76a2",
        "value": "silberstromx.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:53+00:00",
        "timestamp": "1774022453",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb8a6c21-167a-428c-b323-f2b17305343f",
        "value": "silberstromz.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:53+00:00",
        "timestamp": "1774022454",
        "to_ids": true,
        "type": "domain",
        "uuid": "da353a23-f744-407b-a4c2-692723f079a9",
        "value": "slowcube.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:54+00:00",
        "timestamp": "1774022454",
        "to_ids": true,
        "type": "domain",
        "uuid": "99fd9ac8-42a7-441a-9a40-72c787a560c1",
        "value": "solarisbridge.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:54+00:00",
        "timestamp": "1774022454",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d331fb3-2b23-4046-a2ae-7ed9fdfcc953",
        "value": "soma-grid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:54+00:00",
        "timestamp": "1774022454",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0c47a2a-9cc9-4b94-9340-3c5e00bbdb1e",
        "value": "space-x0-open.curvazero.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:54+00:00",
        "timestamp": "1774022454",
        "to_ids": true,
        "type": "domain",
        "uuid": "665f179b-0b04-464a-9865-449b772dd881",
        "value": "space-x9-open.lumen-nodo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:54+00:00",
        "timestamp": "1774022454",
        "to_ids": true,
        "type": "domain",
        "uuid": "31089b8a-0073-4282-9af3-c721ed478385",
        "value": "specime7-layer.bonflac.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:54+00:00",
        "timestamp": "1774022454",
        "to_ids": true,
        "type": "domain",
        "uuid": "a81cfe57-2114-4ac7-907c-ba56b343eae9",
        "value": "stabletu.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:55+00:00",
        "timestamp": "1774022455",
        "to_ids": true,
        "type": "domain",
        "uuid": "d39c49f2-46ca-4f57-820f-2ec803997260",
        "value": "starkewahl.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:55+00:00",
        "timestamp": "1774022455",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6fee66f-49a5-4989-9815-e8626c51c101",
        "value": "staticboundary.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:55+00:00",
        "timestamp": "1774022455",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc72c20d-e327-4d45-ac3a-172014f44387",
        "value": "stonebay.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:55+00:00",
        "timestamp": "1774022455",
        "to_ids": true,
        "type": "domain",
        "uuid": "d886dee0-9dcc-460b-b531-216da3f7568e",
        "value": "stratagrid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:55+00:00",
        "timestamp": "1774022455",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4cc1fa6-64c8-483f-9be6-f2786c91b914",
        "value": "swiftbasalt.octagonon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:55+00:00",
        "timestamp": "1774022455",
        "to_ids": true,
        "type": "domain",
        "uuid": "86c0a831-e070-4807-b41f-f3f001c4caf7",
        "value": "sync-v01-auth.optico-voda.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:55+00:00",
        "timestamp": "1774022456",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc073032-51f4-45d5-81b0-b759bc0ecbf4",
        "value": "sync-v9-vision.terra-data.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:56+00:00",
        "timestamp": "1774022456",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4384884-e8a3-47d9-96b4-61c5b8faeefa",
        "value": "sync-z2-data.metalloarea.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:56+00:00",
        "timestamp": "1774022456",
        "to_ids": true,
        "type": "domain",
        "uuid": "4910b694-6fdf-4ef0-92e0-7a96bceef6d1",
        "value": "sys-s33-monitor.punto-viva.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:56+00:00",
        "timestamp": "1774022456",
        "to_ids": true,
        "type": "domain",
        "uuid": "68a17c85-c0e9-45c9-ab94-a6d371568056",
        "value": "sys2power.densapoint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:56+00:00",
        "timestamp": "1774022456",
        "to_ids": true,
        "type": "domain",
        "uuid": "aaaae90d-4fb1-4c16-9d20-f504afd6c4ad",
        "value": "systemresource.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:56+00:00",
        "timestamp": "1774022456",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ca28538-e292-419b-85e6-fee37aea945c",
        "value": "t5-auth-x4.viametrica.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:56+00:00",
        "timestamp": "1774022456",
        "to_ids": true,
        "type": "domain",
        "uuid": "b41dd0c8-61c9-43eb-a929-dbcc98cb822c",
        "value": "t5-shell-core.duronodo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:56+00:00",
        "timestamp": "1774022457",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ab9a1a5-4673-4257-80ec-943c44aeb09b",
        "value": "takefree.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:57+00:00",
        "timestamp": "1774022457",
        "to_ids": true,
        "type": "domain",
        "uuid": "fefdcd36-2648-4295-b01d-137b7b502c3c",
        "value": "tempiso.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:57+00:00",
        "timestamp": "1774022457",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c3b5426-9e1c-4def-8e6b-99a87e8b26fe",
        "value": "termocenter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:57+00:00",
        "timestamp": "1774022457",
        "to_ids": true,
        "type": "domain",
        "uuid": "1312583c-3973-439d-8d66-83e90b6eeb39",
        "value": "terra-data.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:57+00:00",
        "timestamp": "1774022457",
        "to_ids": true,
        "type": "domain",
        "uuid": "b92591d4-2343-4d70-ac81-8143cc9dbeb6",
        "value": "terrafirma.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:57+00:00",
        "timestamp": "1774022457",
        "to_ids": true,
        "type": "domain",
        "uuid": "feaba058-24d5-4538-b89f-148dee23fa08",
        "value": "terralibre.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:57+00:00",
        "timestamp": "1774022458",
        "to_ids": true,
        "type": "domain",
        "uuid": "b87d095a-6728-4c87-a15c-632fd6ddf0e6",
        "value": "tgua.blowoff.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:58+00:00",
        "timestamp": "1774022458",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb9ea5d5-63e9-4027-adf5-2fd4f17f6fa4",
        "value": "theorfier.yardnext.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:58+00:00",
        "timestamp": "1774022458",
        "to_ids": true,
        "type": "domain",
        "uuid": "88855901-0556-428d-a78a-2c6adf84267f",
        "value": "timestop.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:58+00:00",
        "timestamp": "1774022458",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2c2244e-50a5-4440-82e4-08969cdbaa40",
        "value": "trace1alpha.luxalabs.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:58+00:00",
        "timestamp": "1774022458",
        "to_ids": true,
        "type": "domain",
        "uuid": "f352389d-052f-4c23-81a1-e73a0fa6b8f1",
        "value": "tren-sai.cokefun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:58+00:00",
        "timestamp": "1774022458",
        "to_ids": true,
        "type": "domain",
        "uuid": "0769dbaf-1cb6-4ff4-88ce-8b22f7dd0f2f",
        "value": "tri-crestor.inksky.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:58+00:00",
        "timestamp": "1774022458",
        "to_ids": true,
        "type": "domain",
        "uuid": "c91ad8c4-2430-4608-a504-b7af8d3d1986",
        "value": "trilithon.easttea.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:58+00:00",
        "timestamp": "1774022459",
        "to_ids": true,
        "type": "domain",
        "uuid": "480225f7-d19b-4867-ad85-69c1e76ddeb8",
        "value": "trivale8et.darkboll.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:59+00:00",
        "timestamp": "1774022459",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a1e342a-76fa-486f-aa5b-823f972fd43e",
        "value": "trivaleor.gramsup.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:59+00:00",
        "timestamp": "1774022459",
        "to_ids": true,
        "type": "domain",
        "uuid": "f791df67-41de-413e-8f51-a50f86dbe6d3",
        "value": "tunetwo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:59+00:00",
        "timestamp": "1774022459",
        "to_ids": true,
        "type": "domain",
        "uuid": "04efb9d7-e6c9-4fa2-adc7-dc0eb20db478",
        "value": "uler.jokerun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:59+00:00",
        "timestamp": "1774022459",
        "to_ids": true,
        "type": "domain",
        "uuid": "30ff5264-e6b1-478f-a3d6-62e974811312",
        "value": "uz51av.gronstat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:59+00:00",
        "timestamp": "1774022459",
        "to_ids": true,
        "type": "domain",
        "uuid": "28820bef-1cf8-49ac-ba16-9e1f1ae15140",
        "value": "vast3field.nuxflow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:00:59+00:00",
        "timestamp": "1774022460",
        "to_ids": true,
        "type": "domain",
        "uuid": "822e49e0-3332-4dfa-97b2-f6745ec3c401",
        "value": "vectorstorage.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:00+00:00",
        "timestamp": "1774022460",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b38f08a-828f-4add-aef0-ba4ea4cad39d",
        "value": "vellithos5.domprot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:00+00:00",
        "timestamp": "1774022460",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c825e9b-e5ae-4a53-85dc-603197d1a86a",
        "value": "velocicorsa.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:00+00:00",
        "timestamp": "1774022460",
        "to_ids": true,
        "type": "domain",
        "uuid": "37454cc7-9fa9-44da-bd38-e8afb7080400",
        "value": "veloxfundo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:00+00:00",
        "timestamp": "1774022460",
        "to_ids": true,
        "type": "domain",
        "uuid": "abaa2793-7577-4ac3-9e16-99e43d978dc9",
        "value": "veloxunit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:00+00:00",
        "timestamp": "1774022460",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1496d98-65e4-4f5e-b333-6280558b7ac9",
        "value": "ventaserv.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:00+00:00",
        "timestamp": "1774022460",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9e0e94a-41b6-4b3d-9d4a-a2e11a5aa8b6",
        "value": "ventonovo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:00+00:00",
        "timestamp": "1774022461",
        "to_ids": true,
        "type": "domain",
        "uuid": "c532c897-e1c0-42ec-ac23-5635dc548e09",
        "value": "versicodex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:01+00:00",
        "timestamp": "1774022461",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c267891-0d85-4d77-87e3-e2f807df462a",
        "value": "viametrica.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:01+00:00",
        "timestamp": "1774022461",
        "to_ids": true,
        "type": "domain",
        "uuid": "93c65dc8-0659-42d2-a69d-a2cfd696159c",
        "value": "view3sync.altopoint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:01+00:00",
        "timestamp": "1774022461",
        "to_ids": true,
        "type": "domain",
        "uuid": "96df19a3-7969-451f-870a-6c4063032045",
        "value": "vis4sync.ventaserv.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:01+00:00",
        "timestamp": "1774022461",
        "to_ids": true,
        "type": "domain",
        "uuid": "a980562f-4c32-42df-95b5-39b8a7258543",
        "value": "vivaflux.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:01+00:00",
        "timestamp": "1774022461",
        "to_ids": true,
        "type": "domain",
        "uuid": "17064301-4c98-4311-876d-d928979f8524",
        "value": "vortex-lab.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:01+00:00",
        "timestamp": "1774022461",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e1910e5-29d3-4c46-8c42-75d570d93d3f",
        "value": "vouayger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:01+00:00",
        "timestamp": "1774022462",
        "to_ids": true,
        "type": "domain",
        "uuid": "43e7a4c3-64a7-4d9a-b9d1-511f8fa6ed2f",
        "value": "vszagmsi.besthire.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:02+00:00",
        "timestamp": "1774022462",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a401e49-4d5f-4db6-9159-5c0c3663035b",
        "value": "vv4rm-scope.catflow.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:02+00:00",
        "timestamp": "1774022462",
        "to_ids": true,
        "type": "domain",
        "uuid": "31e3eb89-4a71-40c6-af0f-18efe64a2e4f",
        "value": "w3-sync-v99.versicodex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:02+00:00",
        "timestamp": "1774022462",
        "to_ids": true,
        "type": "domain",
        "uuid": "69ee80db-a43d-4171-ba5e-084f00c1f862",
        "value": "watc5-field.botslap.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:02+00:00",
        "timestamp": "1774022462",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba4313c7-9f05-461c-97b1-8d4e2041acf5",
        "value": "web-proxy-707.faser-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:02+00:00",
        "timestamp": "1774022462",
        "to_ids": true,
        "type": "domain",
        "uuid": "db9963a0-8c1e-41b0-a434-02bc76955547",
        "value": "web-v03-infra.vortex-lab.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:02+00:00",
        "timestamp": "1774022462",
        "to_ids": true,
        "type": "domain",
        "uuid": "5aa184f7-955e-4336-a55b-15169d39410e",
        "value": "web1infra.lumenlabs.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:03+00:00",
        "timestamp": "1774022463",
        "to_ids": true,
        "type": "domain",
        "uuid": "48928fa6-e93f-4b6b-ae64-215ed1edc2d3",
        "value": "windbay.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:03+00:00",
        "timestamp": "1774022463",
        "to_ids": true,
        "type": "domain",
        "uuid": "377cf8e7-d073-4302-a268-95de00bd1e53",
        "value": "woodflo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:03+00:00",
        "timestamp": "1774022463",
        "to_ids": true,
        "type": "domain",
        "uuid": "075c3cb3-e635-4ee6-983c-cf14a011435e",
        "value": "worldwde.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:03+00:00",
        "timestamp": "1774022463",
        "to_ids": true,
        "type": "domain",
        "uuid": "944b7c10-9620-462e-94fa-ba71220cf7e8",
        "value": "x4-web-p09.amplitudo-v.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:03+00:00",
        "timestamp": "1774022463",
        "to_ids": true,
        "type": "domain",
        "uuid": "a29100f2-65f8-4063-9181-e8406a2ae88e",
        "value": "x9-space-v5.stratagrid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:03+00:00",
        "timestamp": "1774022463",
        "to_ids": true,
        "type": "domain",
        "uuid": "60a694b7-4565-4cb6-96c5-a258bf3e21ed",
        "value": "xdxc70yc.jokerun.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:03+00:00",
        "timestamp": "1774022464",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4db5e1a-19f6-4d56-a1b7-ee8678481549",
        "value": "y1-point-v7.viametrica.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:04+00:00",
        "timestamp": "1774022464",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d51d279-ff25-465b-a7bf-0e924ee7204a",
        "value": "yardnext.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:04+00:00",
        "timestamp": "1774022464",
        "to_ids": true,
        "type": "domain",
        "uuid": "73f4407f-6c3d-4dbd-af02-1746a581caa1",
        "value": "z3-app-data.focozero.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:04+00:00",
        "timestamp": "1774022464",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef5f6556-9023-45ca-a55f-6149f511d71f",
        "value": "zbyhm.cokenote.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:04+00:00",
        "timestamp": "1774022464",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f055d85-b837-4358-a9ef-79f65959df1c",
        "value": "zone-v11-area.silberstromz.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T16:01:04+00:00",
        "timestamp": "1774022464",
        "to_ids": true,
        "type": "domain",
        "uuid": "a771d550-5823-4cf7-a07b-5888660a79f0",
        "value": "zone-v2-area.silberstromx.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:02+00:00",
        "timestamp": "1774026003",
        "to_ids": false,
        "type": "url",
        "uuid": "abde54bf-319e-4fa1-82af-42b326dfd86d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6ddf4243b6b67c17fec1284c5dd8bf6ef32ca3f6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:03+00:00",
        "timestamp": "1774026005",
        "to_ids": false,
        "type": "url",
        "uuid": "d15013fe-205f-49c3-9245-068a7cf8e1b9",
        "value": "https://app.validin.com/detail?find=ex.py&type=dom&ref_id=efb29cad674#tab=host_pairs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:05+00:00",
        "timestamp": "1774026005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "0822308e-3af6-490f-bf32-2ad3a337c147",
        "value": "118.196.71.210",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:06+00:00",
        "timestamp": "1774026006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "564a9f91-1ecf-4df1-a924-bc0fa041afce",
        "value": "137.175.106.18",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:06+00:00",
        "timestamp": "1774026006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b52af34d-2f66-4928-9cdd-01daddbbdca2",
        "value": "152.53.238.201",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:06+00:00",
        "timestamp": "1774026006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1bb0f1e8-749f-413c-ad36-fc693cfbd3b2",
        "value": "172.235.189.115",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:06+00:00",
        "timestamp": "1774026006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "431edc87-bac7-421e-9193-f712434ac693",
        "value": "194.180.49.176",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:06+00:00",
        "timestamp": "1774026007",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "ea95ba57-1e50-4231-bd15-e318cfdf9f45",
        "value": "38.124.152.240",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:07+00:00",
        "timestamp": "1774026007",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "51951ef2-b2fc-4dd9-a889-f0e02623dedb",
        "value": "65.109.185.79",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:07+00:00",
        "timestamp": "1774026007",
        "to_ids": false,
        "type": "url",
        "uuid": "12f3ac50-9457-49ce-811d-05fdbc88042b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7a44ed57900cdb4e5b2d948c4d9d586079144577",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:07+00:00",
        "timestamp": "1774026007",
        "to_ids": false,
        "type": "url",
        "uuid": "1242d304-b85d-42b5-a1cc-2414ef75b1ed",
        "value": "https://x.com/SansLimit3/status/2034575676355780910",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:07+00:00",
        "timestamp": "1774026008",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "91eacde7-602e-468c-b81d-ce9526802a47",
        "value": "160.191.183.126",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:08+00:00",
        "timestamp": "1774026008",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "05e6ff25-11c7-46ad-9c6d-b8198f842fce",
        "value": "160.191.183.137",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T17:00:08+00:00",
        "timestamp": "1774026008",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4b51269c-b49f-4208-8fa0-87f52aac1ca6",
        "value": "160.191.183.147",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_trivy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T19:00:02+00:00",
        "timestamp": "1774033204",
        "to_ids": false,
        "type": "url",
        "uuid": "04701d54-a760-4453-bc70-1e6d414a0b73",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/fe508da4845599e4ff26851d15709e4a77517425",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_trivy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T19:00:04+00:00",
        "timestamp": "1774033205",
        "to_ids": false,
        "type": "url",
        "uuid": "d97187e2-77c6-4638-ae9e-557cd8bf353f",
        "value": "https://socket.dev/blog/trivy-under-attack-again-github-actions-compromise",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_trivy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T19:00:05+00:00",
        "timestamp": "1774033206",
        "to_ids": false,
        "type": "url",
        "uuid": "e627d96d-f36c-456f-ba25-c32b54ccd4f3",
        "value": "https://www.virustotal.com/gui/file/18a24f83e807479438dcab7a1804c51a00dafc1d526698a66e0640d1e5dd671a/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_trivy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T19:00:06+00:00",
        "timestamp": "1774033206",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e62c583-aeb2-4205-bffc-edc31cc49dce",
        "value": "aquasecurtiy.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_trivy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T19:00:06+00:00",
        "timestamp": "1774033206",
        "to_ids": true,
        "type": "domain",
        "uuid": "53408d10-942b-4c20-8851-f33eeb5d2f22",
        "value": "scan.aquasecurtiy.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T19:00:06+00:00",
        "timestamp": "1774033206",
        "to_ids": false,
        "type": "url",
        "uuid": "3482fb87-fb92-42d6-945a-bc24e82cd877",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c7ed36c78b738161ea8be0f00743a581570959db",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T19:00:06+00:00",
        "timestamp": "1774033206",
        "to_ids": false,
        "type": "url",
        "uuid": "b8f2ec7e-0ae0-4735-b15f-ba2ed2490c50",
        "value": "https://asec.ahnlab.com/ko/92924",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T19:00:07+00:00",
        "timestamp": "1774033207",
        "to_ids": false,
        "type": "url",
        "uuid": "c13231bd-fa04-4f53-a692-60e60dfa91c6",
        "value": "https://www.virustotal.com/gui/file/7bbfd3ac7ab766c996f80fd414118705ee5e8e822c26513bb3e6920c25efa94d/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T19:00:07+00:00",
        "timestamp": "1774033207",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "14ecded9-1561-4353-9008-137b282baf5f",
        "value": "119.28.70.225",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "silverfox",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T19:00:07+00:00",
        "timestamp": "1774033207",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "66242b7e-e8e1-4d9a-8634-22403ea13e55",
        "value": "192.238.129.47",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:02+00:00",
        "timestamp": "1774036803",
        "to_ids": false,
        "type": "url",
        "uuid": "e99fd2af-f3c8-4d46-80ba-4afad420a40a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/438b3b24ccbcb7fae7168e55eaaca47d80ac363e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:03+00:00",
        "timestamp": "1774036804",
        "to_ids": false,
        "type": "url",
        "uuid": "de156711-d9a4-4e8d-8ebe-c860650d41a8",
        "value": "https://x.com/MarceloRivero/status/2035075917760925767",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:04+00:00",
        "timestamp": "1774036805",
        "to_ids": true,
        "type": "domain",
        "uuid": "a31b132b-9abe-420f-b63e-0ac08f5cf5b6",
        "value": "applemaclos.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:05+00:00",
        "timestamp": "1774036806",
        "to_ids": false,
        "type": "url",
        "uuid": "dae08422-98e8-4a5b-9ec5-2ddaa39a4052",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/52cdfe802d247eaa4a629200c19a87835206e85b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:06+00:00",
        "timestamp": "1774036806",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0445223-c683-45f2-af4d-f655b1e027ac",
        "value": "af-whatsapp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:06+00:00",
        "timestamp": "1774036806",
        "to_ids": true,
        "type": "domain",
        "uuid": "f037ed05-ab01-4cca-93fa-a01b0cd1ba61",
        "value": "anzhihui.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:06+00:00",
        "timestamp": "1774036807",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f8d04c9-827f-4669-8c53-5ada7b0d8d0b",
        "value": "apps-aisi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:07+00:00",
        "timestamp": "1774036807",
        "to_ids": true,
        "type": "domain",
        "uuid": "757340b1-bc11-4931-a5df-a03d23d464e5",
        "value": "apps-helloworld.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:07+00:00",
        "timestamp": "1774036807",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2f0e2d8-74d1-47b5-9470-09a4ad4f53d6",
        "value": "apps-huorong.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:07+00:00",
        "timestamp": "1774036807",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb48e9b5-c742-475a-9cbd-c9ea4e9e7c62",
        "value": "apps-i4.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:07+00:00",
        "timestamp": "1774036807",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8ba8025-2e91-42bd-9ddb-bfecfb1d5e5a",
        "value": "apps-kakaocorp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:07+00:00",
        "timestamp": "1774036807",
        "to_ids": true,
        "type": "domain",
        "uuid": "7552934d-cb8a-4846-9fbd-9c8b1aeb5bb0",
        "value": "apps-kakaotalk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:07+00:00",
        "timestamp": "1774036808",
        "to_ids": true,
        "type": "domain",
        "uuid": "fec95120-adc3-4458-b6d9-1846a79f2850",
        "value": "apps-kuaiiian.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:08+00:00",
        "timestamp": "1774036808",
        "to_ids": true,
        "type": "domain",
        "uuid": "24f92381-08b8-492f-97d4-c9bf2911f1ce",
        "value": "apps-oray.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:08+00:00",
        "timestamp": "1774036808",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a6b4dbc-fe32-47bb-81d6-79c1cd17ddd2",
        "value": "apps-sougoupinyin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:08+00:00",
        "timestamp": "1774036808",
        "to_ids": true,
        "type": "domain",
        "uuid": "31377220-8e36-423c-9c85-d86ef268d180",
        "value": "apps-tencent.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:08+00:00",
        "timestamp": "1774036808",
        "to_ids": true,
        "type": "domain",
        "uuid": "7289fac0-c2c9-42da-a30a-d0df9e75ee89",
        "value": "apps-v2rayn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:08+00:00",
        "timestamp": "1774036808",
        "to_ids": true,
        "type": "domain",
        "uuid": "01a44f8d-b192-4366-b981-0c11a45e1909",
        "value": "apps-winrar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:08+00:00",
        "timestamp": "1774036808",
        "to_ids": true,
        "type": "domain",
        "uuid": "847d77f3-eca2-4e41-91e9-01723c6ef540",
        "value": "apps-wps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:08+00:00",
        "timestamp": "1774036809",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab2a7d71-0094-4aca-9198-4a91a8946323",
        "value": "apps-xiangrikui.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:09+00:00",
        "timestamp": "1774036809",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc15954a-0742-46e1-a86c-2679dcb033c6",
        "value": "appx-wps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:09+00:00",
        "timestamp": "1774036809",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f3cd6b1-0883-42fc-9ca4-83dd439ac785",
        "value": "aps-wps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:09+00:00",
        "timestamp": "1774036809",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ccfeac1-2293-49be-a9ed-385fe054d7b2",
        "value": "awq-line.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:09+00:00",
        "timestamp": "1774036809",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bb331e5-bc8a-42cd-9959-eeaec370be2e",
        "value": "baobeimiao.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:09+00:00",
        "timestamp": "1774036810",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba9560e2-e3c6-486d-acb3-31580559c971",
        "value": "bbbbbd.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:10+00:00",
        "timestamp": "1774036810",
        "to_ids": true,
        "type": "domain",
        "uuid": "f933ff9f-e7b2-4b50-bdfb-519deefa0f3d",
        "value": "biz-wps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:10+00:00",
        "timestamp": "1774036810",
        "to_ids": true,
        "type": "domain",
        "uuid": "c302bf2e-2725-4cf2-afc8-8897873886fd",
        "value": "bjjfyyfk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:10+00:00",
        "timestamp": "1774036810",
        "to_ids": true,
        "type": "domain",
        "uuid": "62799615-e2cb-4304-b302-f33ef088ce15",
        "value": "chachazaimai.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:10+00:00",
        "timestamp": "1774036810",
        "to_ids": true,
        "type": "domain",
        "uuid": "92bffb16-dced-45e9-8fab-fa1904213c17",
        "value": "clash55.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:10+00:00",
        "timestamp": "1774036810",
        "to_ids": true,
        "type": "domain",
        "uuid": "38ff996e-c827-4cd7-b782-a01c79b10f3a",
        "value": "clash99.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:10+00:00",
        "timestamp": "1774036810",
        "to_ids": true,
        "type": "domain",
        "uuid": "fdff8674-5a74-4912-98dc-c753c8c23c84",
        "value": "clashdown.link",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:11+00:00",
        "timestamp": "1774036811",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9060a8d-a7a3-4256-9c30-9704bc66c6e0",
        "value": "clashdown.today",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:11+00:00",
        "timestamp": "1774036811",
        "to_ids": true,
        "type": "domain",
        "uuid": "39390d37-eb23-47e4-926d-5d52c3f9f633",
        "value": "css-line.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:11+00:00",
        "timestamp": "1774036811",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bfcb514-bd7b-4d8f-b4fb-dce98ecefec8",
        "value": "cym-line.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:11+00:00",
        "timestamp": "1774036811",
        "to_ids": true,
        "type": "domain",
        "uuid": "96a28fa3-6220-47ff-bcf7-43c2bc2c5a31",
        "value": "drggn.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:11+00:00",
        "timestamp": "1774036811",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0b34fc9-ddfa-42e5-af78-5caf271ad820",
        "value": "dtm2.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:11+00:00",
        "timestamp": "1774036811",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4b72bec-0367-4ac6-95eb-6705a56f6e43",
        "value": "fangyi-youdao.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:11+00:00",
        "timestamp": "1774036812",
        "to_ids": true,
        "type": "domain",
        "uuid": "828c5823-6818-491d-830b-0631bc0e865e",
        "value": "gk-whatsapp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:12+00:00",
        "timestamp": "1774036812",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce894990-74d6-47ec-9894-bbd980044b00",
        "value": "helloworld-apps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:12+00:00",
        "timestamp": "1774036812",
        "to_ids": true,
        "type": "domain",
        "uuid": "e979711b-44c7-4d47-9bb8-8d18ff424532",
        "value": "helloworld-win.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:12+00:00",
        "timestamp": "1774036812",
        "to_ids": true,
        "type": "domain",
        "uuid": "28bc4323-2374-4c1b-ba86-deee0dd5e7ce",
        "value": "huorong-zh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:12+00:00",
        "timestamp": "1774036812",
        "to_ids": true,
        "type": "domain",
        "uuid": "45f17036-dc1a-4306-b337-ed8b498c9ceb",
        "value": "info-wps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:12+00:00",
        "timestamp": "1774036812",
        "to_ids": true,
        "type": "domain",
        "uuid": "506246a3-cee3-4379-90f8-41dea6a78c3a",
        "value": "isi-cn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:12+00:00",
        "timestamp": "1774036813",
        "to_ids": true,
        "type": "domain",
        "uuid": "3daba6ca-882a-4225-87f9-81c5da0afd76",
        "value": "jhbds.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:13+00:00",
        "timestamp": "1774036813",
        "to_ids": true,
        "type": "domain",
        "uuid": "350b4877-268c-44b8-ae38-badf24e6cb7c",
        "value": "jxxv.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:13+00:00",
        "timestamp": "1774036813",
        "to_ids": true,
        "type": "domain",
        "uuid": "206cfe3b-a578-4028-afbc-b3e2a05d7b7a",
        "value": "ket-line.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:13+00:00",
        "timestamp": "1774036813",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3ef8779-6183-4275-8bcc-c5de0c512b47",
        "value": "kor-telegram.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:13+00:00",
        "timestamp": "1774036813",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5d48903-c50e-485b-87d0-adeb0adb5380",
        "value": "kr-telegram.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:13+00:00",
        "timestamp": "1774036813",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce8f36f6-aef8-4ae8-89eb-b29cb619aa55",
        "value": "kuai866.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:14+00:00",
        "timestamp": "1774036814",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2832ccd-1658-4efb-a45a-e762c0bd7bbe",
        "value": "kuailian-win.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:14+00:00",
        "timestamp": "1774036814",
        "to_ids": true,
        "type": "domain",
        "uuid": "4df4a78d-b4b5-425a-a709-f2bdba964f94",
        "value": "kuailian.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:14+00:00",
        "timestamp": "1774036814",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bf5abc2-ae77-4cdc-8a04-45b0549b9e63",
        "value": "kuailianjiasuqi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:14+00:00",
        "timestamp": "1774036814",
        "to_ids": true,
        "type": "domain",
        "uuid": "39992569-97d9-468b-b1c3-5f44d3844b12",
        "value": "letsjiasu.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:14+00:00",
        "timestamp": "1774036814",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8689372-b5ec-4079-ae41-12dde902f33f",
        "value": "letsjiasuqi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:14+00:00",
        "timestamp": "1774036814",
        "to_ids": true,
        "type": "domain",
        "uuid": "174e02da-a87f-4066-880d-b99cabd5b2dd",
        "value": "letsvpn-download.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:14+00:00",
        "timestamp": "1774036815",
        "to_ids": true,
        "type": "domain",
        "uuid": "137cdce1-cef7-4e18-8ebe-5cd2a3a09148",
        "value": "letsvpn.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:15+00:00",
        "timestamp": "1774036815",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c4ac34d-0fbb-4b64-aea3-b1e650e123b5",
        "value": "letsvpntop.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:15+00:00",
        "timestamp": "1774036815",
        "to_ids": true,
        "type": "domain",
        "uuid": "820bfa5a-8808-4291-a5dd-9d0a5836b2e4",
        "value": "letsxiazai.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:15+00:00",
        "timestamp": "1774036815",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b0fd639-520c-4e96-bd4c-26a8ce746e15",
        "value": "lmtiv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:15+00:00",
        "timestamp": "1774036815",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f8cda07-1a5c-4799-aa24-282e23e4e31b",
        "value": "me-telegram.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:15+00:00",
        "timestamp": "1774036815",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbd2e7b8-8cab-4c0a-beca-3f1dedac2952",
        "value": "mqk-line.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:15+00:00",
        "timestamp": "1774036816",
        "to_ids": true,
        "type": "domain",
        "uuid": "352d4492-eb47-4d36-8523-0c02eddc1681",
        "value": "of-aisi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:16+00:00",
        "timestamp": "1774036816",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8ba6cb0-7d15-4dae-bb0b-5f0e1fb142cb",
        "value": "of-helloworld.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:16+00:00",
        "timestamp": "1774036816",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bf8865e-bf97-4e97-90b9-6f009b0cbe82",
        "value": "of-huorong.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:16+00:00",
        "timestamp": "1774036816",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f7877de-d5fb-4754-8b2c-283a29bc7028",
        "value": "of-i4.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:16+00:00",
        "timestamp": "1774036816",
        "to_ids": true,
        "type": "domain",
        "uuid": "36feacd9-a910-4faa-a22f-49d52cdc5cd2",
        "value": "of-klian.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:16+00:00",
        "timestamp": "1774036816",
        "to_ids": true,
        "type": "domain",
        "uuid": "181260df-2f3a-4370-959c-159cdbb4a7ce",
        "value": "of-kuallian.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:16+00:00",
        "timestamp": "1774036816",
        "to_ids": true,
        "type": "domain",
        "uuid": "41a26e46-31a3-477b-b84e-26af4ccab9c8",
        "value": "of-safew.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:17+00:00",
        "timestamp": "1774036817",
        "to_ids": true,
        "type": "domain",
        "uuid": "23586da8-d759-4314-a562-d303c43ef285",
        "value": "of-tencent.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:17+00:00",
        "timestamp": "1774036817",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b7efeaf-891f-48c3-a5b8-27a31302a740",
        "value": "of-v2rayn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:17+00:00",
        "timestamp": "1774036817",
        "to_ids": true,
        "type": "domain",
        "uuid": "fabf0283-1af5-422a-a349-a643de8a329c",
        "value": "of-winrar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:17+00:00",
        "timestamp": "1774036817",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b3f2abb-0581-4f25-b3b4-ae786375e1a8",
        "value": "pc-huorong.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:17+00:00",
        "timestamp": "1774036817",
        "to_ids": true,
        "type": "domain",
        "uuid": "38b9ddae-7708-4609-b5e6-d5de7e69c7e7",
        "value": "pc-kakaocorp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:17+00:00",
        "timestamp": "1774036817",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d7d7f0a-1c9b-420d-a2f9-2c43637e2333",
        "value": "pc-kakaotalk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:17+00:00",
        "timestamp": "1774036818",
        "to_ids": true,
        "type": "domain",
        "uuid": "8163f6f0-b817-42fd-8a61-d5cc84d602bc",
        "value": "pc-oray.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:18+00:00",
        "timestamp": "1774036818",
        "to_ids": true,
        "type": "domain",
        "uuid": "efad3632-fb57-4350-ae72-b2f948971e98",
        "value": "pc-sougous.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:18+00:00",
        "timestamp": "1774036818",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b199210-cefb-4480-86a6-660219f69e3c",
        "value": "pc-tenxun.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:18+00:00",
        "timestamp": "1774036818",
        "to_ids": true,
        "type": "domain",
        "uuid": "dece56af-d41c-4a95-93b1-ed523de4f81a",
        "value": "pc-v2rayn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:18+00:00",
        "timestamp": "1774036818",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d829996-7252-400f-a062-2cc12ddae887",
        "value": "pc-winrar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:18+00:00",
        "timestamp": "1774036818",
        "to_ids": true,
        "type": "domain",
        "uuid": "f991a6ae-643f-46b4-94ca-19e1f232dffa",
        "value": "quuv.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:18+00:00",
        "timestamp": "1774036818",
        "to_ids": true,
        "type": "domain",
        "uuid": "5112a0cb-2248-42ce-ad8c-17b47b3cd38e",
        "value": "quuv.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:19+00:00",
        "timestamp": "1774036819",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc79dab4-2569-4b79-b669-124ded6f7f72",
        "value": "rok-telegram.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:19+00:00",
        "timestamp": "1774036819",
        "to_ids": true,
        "type": "domain",
        "uuid": "06ac33af-1ff1-4590-81c5-03054ccd21f0",
        "value": "ru-kuailian.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:19+00:00",
        "timestamp": "1774036819",
        "to_ids": true,
        "type": "domain",
        "uuid": "084475d1-36f2-4628-a261-baaf7e20acd9",
        "value": "safew-of.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:19+00:00",
        "timestamp": "1774036819",
        "to_ids": true,
        "type": "domain",
        "uuid": "630de4b7-1861-442f-ab41-810e1893f563",
        "value": "safew-win.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:19+00:00",
        "timestamp": "1774036819",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2332276-c2e6-4361-83ab-9a5efe2363a0",
        "value": "sogou-of.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:19+00:00",
        "timestamp": "1774036819",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e3d5469-63ea-41b0-92a1-f20fa7d06753",
        "value": "sogou-vr.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:20+00:00",
        "timestamp": "1774036820",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d351f5e-f394-487e-b937-d33e9f91d9d8",
        "value": "sogou-ws.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:20+00:00",
        "timestamp": "1774036820",
        "to_ids": true,
        "type": "domain",
        "uuid": "1779203b-215f-42d8-8d5f-51880269e1ba",
        "value": "sougoupinyin-cn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:20+00:00",
        "timestamp": "1774036820",
        "to_ids": true,
        "type": "domain",
        "uuid": "24c20b14-da2e-49b0-8739-2f4002d9d639",
        "value": "sougour.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:20+00:00",
        "timestamp": "1774036820",
        "to_ids": true,
        "type": "domain",
        "uuid": "d34a23ae-f611-440e-9695-a995e73ede80",
        "value": "sovgou.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:20+00:00",
        "timestamp": "1774036820",
        "to_ids": true,
        "type": "domain",
        "uuid": "b295a153-b8c3-4ae2-98f5-9c6f993a5ec4",
        "value": "t6688.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:20+00:00",
        "timestamp": "1774036820",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f4eccb1-4364-48d4-accb-8952ae2b8f05",
        "value": "telegram-win.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:20+00:00",
        "timestamp": "1774036821",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8c50dc0-acfd-4c58-b613-d2c288718d81",
        "value": "telegrnm.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:21+00:00",
        "timestamp": "1774036821",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c1c9def-87a0-4be4-8280-cb97907849da",
        "value": "telegtam.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:21+00:00",
        "timestamp": "1774036821",
        "to_ids": true,
        "type": "domain",
        "uuid": "642e0a68-ec1f-4142-8896-c3cf6e27490d",
        "value": "tmxs71.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:21+00:00",
        "timestamp": "1774036821",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ca6ef07-7f3c-49f9-83a0-58079ca9ba66",
        "value": "tmxs71.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:21+00:00",
        "timestamp": "1774036821",
        "to_ids": true,
        "type": "domain",
        "uuid": "f502199b-1a41-46b5-8004-615aad4b2a5c",
        "value": "tokenpocket.bar",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:21+00:00",
        "timestamp": "1774036821",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c38d5a4-d6e5-4cbc-9ec1-1ab660cdf0b2",
        "value": "tokenpocket.bond",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:21+00:00",
        "timestamp": "1774036822",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f10a711-20d6-43a4-97bb-9c16330cf385",
        "value": "tokenpocket.casa",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:22+00:00",
        "timestamp": "1774036822",
        "to_ids": true,
        "type": "domain",
        "uuid": "efbf8f26-2653-47ec-86ae-15bc018f46eb",
        "value": "tokenpocket.pics",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:22+00:00",
        "timestamp": "1774036822",
        "to_ids": true,
        "type": "domain",
        "uuid": "7258bd9a-a8c4-41a4-90b4-e7ccb01f6763",
        "value": "u7789.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:22+00:00",
        "timestamp": "1774036822",
        "to_ids": true,
        "type": "domain",
        "uuid": "057d1f24-d7d5-4b52-b6ca-5641be994603",
        "value": "v2ray.today",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:22+00:00",
        "timestamp": "1774036822",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c99b7a6-bde9-4202-9dea-4b81ea6a47fd",
        "value": "v2ray.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:22+00:00",
        "timestamp": "1774036822",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ba93837-7cd9-4ae7-97b8-8cbe9fe5e718",
        "value": "v2rayn.bid",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:22+00:00",
        "timestamp": "1774036822",
        "to_ids": true,
        "type": "domain",
        "uuid": "e19a172c-f348-4e64-9814-d49c4e6e5f7c",
        "value": "v2rayn.date",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:22+00:00",
        "timestamp": "1774036823",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f6da393-0cd5-4ea8-9fce-4125639e9509",
        "value": "v2rayn.loan",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:23+00:00",
        "timestamp": "1774036823",
        "to_ids": true,
        "type": "domain",
        "uuid": "11ed011e-0d14-465c-b47a-4f3863844bff",
        "value": "v2rayn.men",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:23+00:00",
        "timestamp": "1774036823",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d5e0871-4295-4a98-ab68-ab5d9bdee52a",
        "value": "v2rayn.uk",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:23+00:00",
        "timestamp": "1774036823",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d348403-34e2-4022-a7bd-f8e25e2c8323",
        "value": "v2rayn.win",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:23+00:00",
        "timestamp": "1774036823",
        "to_ids": true,
        "type": "domain",
        "uuid": "68d67bdf-8b2b-4214-b98a-b19ab880556b",
        "value": "v2rayn.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:23+00:00",
        "timestamp": "1774036823",
        "to_ids": true,
        "type": "domain",
        "uuid": "440538a6-c105-4e8c-b872-35efe9635529",
        "value": "v2raynbid.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:23+00:00",
        "timestamp": "1774036824",
        "to_ids": true,
        "type": "domain",
        "uuid": "62f332cb-6b81-452b-9693-b602a5559dde",
        "value": "v2rayndate.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:24+00:00",
        "timestamp": "1774036824",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ce686fe-dac8-47ca-8358-dead4a233462",
        "value": "v2raynloan.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:24+00:00",
        "timestamp": "1774036824",
        "to_ids": true,
        "type": "domain",
        "uuid": "1203d368-c5ed-43bd-a026-a9423f9cdb89",
        "value": "v2raynmen.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:24+00:00",
        "timestamp": "1774036824",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea315178-a831-4631-8b4d-3594859e9887",
        "value": "v2raynuk.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:24+00:00",
        "timestamp": "1774036824",
        "to_ids": true,
        "type": "domain",
        "uuid": "57ac23f8-8e1f-4525-a921-d6d9918cce79",
        "value": "v2raynwin.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:24+00:00",
        "timestamp": "1774036824",
        "to_ids": true,
        "type": "domain",
        "uuid": "e89cbe4d-c13b-4c8b-bafd-7179848c765b",
        "value": "vvp6.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:24+00:00",
        "timestamp": "1774036824",
        "to_ids": true,
        "type": "domain",
        "uuid": "d91cc102-d569-422e-92b0-d7ab67368046",
        "value": "wdsesx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:24+00:00",
        "timestamp": "1774036825",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8981468-3c43-438b-9046-a0bb8c5f9dc3",
        "value": "weoscb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:25+00:00",
        "timestamp": "1774036825",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8ce289e-5b0d-4ddb-a307-8f959bc9292d",
        "value": "wetgays.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:25+00:00",
        "timestamp": "1774036825",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1f15794-7819-41b5-9fdf-2af76d4396b3",
        "value": "whatvopp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:25+00:00",
        "timestamp": "1774036825",
        "to_ids": true,
        "type": "domain",
        "uuid": "17aa7658-569d-465e-ac20-741cddde8b4e",
        "value": "win-helloworld.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:25+00:00",
        "timestamp": "1774036825",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff0df6f7-54f1-4a62-98cf-0f6af69f489a",
        "value": "win-huorong.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:25+00:00",
        "timestamp": "1774036825",
        "to_ids": true,
        "type": "domain",
        "uuid": "7274580d-ac91-4f29-bf6b-a1067d2396e4",
        "value": "win-i4.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:25+00:00",
        "timestamp": "1774036826",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe3cc3af-e826-41d7-bc53-b2b0f13b3540",
        "value": "win-kakaocorp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:26+00:00",
        "timestamp": "1774036826",
        "to_ids": true,
        "type": "domain",
        "uuid": "76984f19-57b1-440f-a833-5ca1d1ea4fd1",
        "value": "win-kakaotalk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:26+00:00",
        "timestamp": "1774036826",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cf296ca-fa0a-437f-b56e-82848cfec0e8",
        "value": "win-safew.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:26+00:00",
        "timestamp": "1774036826",
        "to_ids": true,
        "type": "domain",
        "uuid": "769cd946-530b-4341-b133-87c5b8a240d1",
        "value": "win-tencent.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:26+00:00",
        "timestamp": "1774036826",
        "to_ids": true,
        "type": "domain",
        "uuid": "f43e3a6c-b442-42b5-aa5a-66bd8e063dc5",
        "value": "win-v2rayn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:26+00:00",
        "timestamp": "1774036826",
        "to_ids": true,
        "type": "domain",
        "uuid": "859dbac1-a8d0-40b1-a749-6c4695c91261",
        "value": "winrar-biz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:26+00:00",
        "timestamp": "1774036826",
        "to_ids": true,
        "type": "domain",
        "uuid": "168fd179-aea6-4402-9e26-322988ff9c18",
        "value": "wm-whatsapp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:27+00:00",
        "timestamp": "1774036827",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb7c6380-6c4f-41b2-a4f3-0ba1a7a7eded",
        "value": "wps-wind.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:27+00:00",
        "timestamp": "1774036827",
        "to_ids": true,
        "type": "domain",
        "uuid": "74c3e4a5-1631-4dab-88f2-de4f1d64a4c4",
        "value": "xb-safew.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:27+00:00",
        "timestamp": "1774036827",
        "to_ids": true,
        "type": "domain",
        "uuid": "9829496c-2f72-41b8-a946-8123bd8cda9d",
        "value": "xiangrikui-apps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:27+00:00",
        "timestamp": "1774036827",
        "to_ids": true,
        "type": "domain",
        "uuid": "46543727-0cbc-4098-9be1-493a26fce54f",
        "value": "xiangrikui-oray.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:27+00:00",
        "timestamp": "1774036827",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8067329-913d-4a66-a036-d16b248a0ef8",
        "value": "xiaopinhui.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:27+00:00",
        "timestamp": "1774036827",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd6ea0bc-2d4d-4e66-ba75-703f9fc47f2c",
        "value": "ya-whatsapp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:27+00:00",
        "timestamp": "1774036828",
        "to_ids": true,
        "type": "domain",
        "uuid": "cceec392-3cba-48f9-9790-71e1411939d7",
        "value": "ylcrwj.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:28+00:00",
        "timestamp": "1774036828",
        "to_ids": true,
        "type": "domain",
        "uuid": "647ea437-736b-4546-b1e2-7529756cf885",
        "value": "yr-kuailian.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:28+00:00",
        "timestamp": "1774036828",
        "to_ids": true,
        "type": "domain",
        "uuid": "f45770f5-950f-47c3-a87e-0a6f38eb8bb2",
        "value": "zh-i4.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:28+00:00",
        "timestamp": "1774036828",
        "to_ids": true,
        "type": "domain",
        "uuid": "4dcf020a-c859-4a73-af72-317fc3cf85fe",
        "value": "zh-tenxun.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:28+00:00",
        "timestamp": "1774036828",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c73ebdc-d621-40b1-9150-e251d812e61b",
        "value": "zh-v2rayn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:28+00:00",
        "timestamp": "1774036828",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bf579dc-79db-439c-8e9a-544befd05a6b",
        "value": "zh-whatsapp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:28+00:00",
        "timestamp": "1774036829",
        "to_ids": true,
        "type": "domain",
        "uuid": "1aa706b1-9bd1-486c-9bcf-e96f0a190f6e",
        "value": "zh-winrar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:29+00:00",
        "timestamp": "1774036829",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5744e37-6143-47a1-b522-35ce628f7668",
        "value": "7s.pc-kakaocorp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:29+00:00",
        "timestamp": "1774036829",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d706d46-30e4-49e8-99a2-aaec4c19b27e",
        "value": "download.i96l6.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kun3",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T20:00:29+00:00",
        "timestamp": "1774036829",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5b0469b-fee6-4f1d-b9f6-a92f4050829a",
        "value": "xinjiapox.oss-ap-southeast-1.aliyuncs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:02+00:00",
        "timestamp": "1774040402",
        "to_ids": false,
        "type": "url",
        "uuid": "912779fb-0b19-4e46-a7bf-64e5bed148aa",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0deea093c2524ffa1b9caa38e53fe8a46b38e8e4",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:02+00:00",
        "timestamp": "1774040403",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e0ee833-71a7-4520-b471-4bea279e5971",
        "value": "62.wapweb-cn-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:03+00:00",
        "timestamp": "1774040404",
        "to_ids": true,
        "type": "domain",
        "uuid": "676c0a07-9171-4b92-934f-6f6e6fc925e2",
        "value": "68.siteim-web-net-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:04+00:00",
        "timestamp": "1774040405",
        "to_ids": true,
        "type": "domain",
        "uuid": "a33755b4-1e50-49ad-a9ae-1438db7d515d",
        "value": "99.be-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:05+00:00",
        "timestamp": "1774040405",
        "to_ids": true,
        "type": "domain",
        "uuid": "2813f0e1-b2dc-4c30-8257-c632723f4107",
        "value": "a-b-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:05+00:00",
        "timestamp": "1774040406",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbb8e8bd-ccb3-4e15-b82c-b7eed62eed61",
        "value": "abv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:06+00:00",
        "timestamp": "1774040406",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bf363d5-b11b-409c-b821-5f6f9cd07510",
        "value": "acvhl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:06+00:00",
        "timestamp": "1774040406",
        "to_ids": true,
        "type": "domain",
        "uuid": "855da73f-59e5-4eb8-b838-439fa359addd",
        "value": "add-bfc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:06+00:00",
        "timestamp": "1774040406",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7d11e6e-e74e-49d4-87ee-4752b548fe0c",
        "value": "add-dax-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:06+00:00",
        "timestamp": "1774040406",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bd177df-1c58-4cd8-86e9-60e6d302b694",
        "value": "add-ekd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:06+00:00",
        "timestamp": "1774040407",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d5c3e5c-a53f-46de-83ac-8580724b269e",
        "value": "add-fnr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:07+00:00",
        "timestamp": "1774040407",
        "to_ids": true,
        "type": "domain",
        "uuid": "887ad1f7-652c-49f2-bd4c-c9435ecd88e3",
        "value": "add-fwt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:07+00:00",
        "timestamp": "1774040407",
        "to_ids": true,
        "type": "domain",
        "uuid": "923b16bf-f141-47fc-8dd5-a1ccead3a77e",
        "value": "add-gkh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:07+00:00",
        "timestamp": "1774040407",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbe0973d-e9b9-4ce0-a538-2957f781ca59",
        "value": "add-mfd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:07+00:00",
        "timestamp": "1774040407",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ae716b5-a6db-406a-b11b-197df3b1b975",
        "value": "add-mhs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:07+00:00",
        "timestamp": "1774040407",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc0af06d-ba1a-4c7a-9f30-55b908746e6c",
        "value": "add-oaq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:07+00:00",
        "timestamp": "1774040408",
        "to_ids": true,
        "type": "domain",
        "uuid": "189a923c-25fc-449b-a4a5-a802b89a5b62",
        "value": "add-rpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:08+00:00",
        "timestamp": "1774040408",
        "to_ids": true,
        "type": "domain",
        "uuid": "60918777-8935-4430-89a6-c434f9d1fb8f",
        "value": "add-sjl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:08+00:00",
        "timestamp": "1774040408",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9bb60da-8516-44f5-ab83-0987db446771",
        "value": "add-smh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:08+00:00",
        "timestamp": "1774040408",
        "to_ids": true,
        "type": "domain",
        "uuid": "159dfd44-2186-4db3-88b3-f7ce1daf42de",
        "value": "add-vwy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:08+00:00",
        "timestamp": "1774040408",
        "to_ids": true,
        "type": "domain",
        "uuid": "e549be62-2344-4348-a1fa-6cd449cfd585",
        "value": "add-zcr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:08+00:00",
        "timestamp": "1774040408",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b5cd0b1-11af-472c-b5ae-a3de706e3a83",
        "value": "aef-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:08+00:00",
        "timestamp": "1774040409",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fa4862b-0f4b-4ec5-9c8c-36071cd0c3bf",
        "value": "app-bfc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:09+00:00",
        "timestamp": "1774040409",
        "to_ids": true,
        "type": "domain",
        "uuid": "65d3e03e-dfef-4c17-9a21-1435726c66ec",
        "value": "app-bqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:09+00:00",
        "timestamp": "1774040409",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f32fcc0-090b-4ea2-8404-953c833a82f2",
        "value": "app-desk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:09+00:00",
        "timestamp": "1774040409",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cb2bc1f-8a67-407d-9cc8-6763fc63d306",
        "value": "app-drive-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:09+00:00",
        "timestamp": "1774040409",
        "to_ids": true,
        "type": "domain",
        "uuid": "cedb32b2-e5f8-48b2-926d-591d50cd0b30",
        "value": "app-frame-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:09+00:00",
        "timestamp": "1774040409",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6747e08-faa8-4e48-b23f-00015bf1d45b",
        "value": "app-gdp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:09+00:00",
        "timestamp": "1774040409",
        "to_ids": true,
        "type": "domain",
        "uuid": "4add617d-b580-40b9-af36-50c3d2e54e0e",
        "value": "app-instant-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:09+00:00",
        "timestamp": "1774040410",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb4d92f7-42e0-464c-b3cf-ce7fff48d68e",
        "value": "app-kia-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:10+00:00",
        "timestamp": "1774040410",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa5a0f05-6d8e-40af-8e16-bf3162178750",
        "value": "app-kpe-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:10+00:00",
        "timestamp": "1774040410",
        "to_ids": true,
        "type": "domain",
        "uuid": "944cb936-fd2e-4433-9664-3bd2b52f5fce",
        "value": "app-lza-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:10+00:00",
        "timestamp": "1774040410",
        "to_ids": true,
        "type": "domain",
        "uuid": "56e2be4d-eca6-4e81-8af5-fb9a44862a99",
        "value": "app-net-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:10+00:00",
        "timestamp": "1774040410",
        "to_ids": true,
        "type": "domain",
        "uuid": "14fc36d9-5190-4cbb-8ffc-da45dd871eea",
        "value": "app-nuh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:10+00:00",
        "timestamp": "1774040410",
        "to_ids": true,
        "type": "domain",
        "uuid": "850eda68-7ccc-4c46-a5ec-c954739b0184",
        "value": "app-rpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:10+00:00",
        "timestamp": "1774040411",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b0ae4dc-33e1-4491-9672-cd3de4125f70",
        "value": "app-rwx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:11+00:00",
        "timestamp": "1774040411",
        "to_ids": true,
        "type": "domain",
        "uuid": "521385fe-7869-4b8a-9d39-c8fbe52e678f",
        "value": "app-spark-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:11+00:00",
        "timestamp": "1774040411",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c6b612c-8d31-44a1-9ada-a02af77d7937",
        "value": "app-tjq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:11+00:00",
        "timestamp": "1774040411",
        "to_ids": true,
        "type": "domain",
        "uuid": "28a57af9-4a85-476c-8afa-c0973fc48acd",
        "value": "app-tpz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:11+00:00",
        "timestamp": "1774040411",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed0df7cc-939f-479f-9430-c5da872fe4fc",
        "value": "app-uro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:11+00:00",
        "timestamp": "1774040412",
        "to_ids": true,
        "type": "domain",
        "uuid": "6dce95cd-cdb1-4130-9caa-1652f473a05f",
        "value": "app-vce-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:12+00:00",
        "timestamp": "1774040412",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9f13bad-c00e-48b5-9ffc-db44886938f5",
        "value": "apphub-cn-live-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:12+00:00",
        "timestamp": "1774040412",
        "to_ids": true,
        "type": "domain",
        "uuid": "91f3dbb3-0bb1-424f-8b13-5edb4e1cba2a",
        "value": "apps-b-c-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:12+00:00",
        "timestamp": "1774040412",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fea9b2e-9655-427b-9272-c7d210a9abbb",
        "value": "apps-d-e-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:12+00:00",
        "timestamp": "1774040412",
        "to_ids": true,
        "type": "domain",
        "uuid": "9076cec2-99e9-45ac-851e-6b4149fb7cc6",
        "value": "apps-d-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:12+00:00",
        "timestamp": "1774040412",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc08ef82-8be9-4ed0-97c1-ef10b0734482",
        "value": "apps-flow-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:12+00:00",
        "timestamp": "1774040412",
        "to_ids": true,
        "type": "domain",
        "uuid": "10ab7d0e-e04f-4799-95f3-758097f5bfe2",
        "value": "apps-h-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:12+00:00",
        "timestamp": "1774040413",
        "to_ids": true,
        "type": "domain",
        "uuid": "10a27bda-9609-4330-a824-60a25633dba9",
        "value": "apps-i-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:13+00:00",
        "timestamp": "1774040413",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d194c26-26d5-4804-8721-303daec3ae27",
        "value": "apps-j-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:13+00:00",
        "timestamp": "1774040413",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b1c12cd-d08d-4546-b01f-6cee2888190d",
        "value": "apps-k-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:13+00:00",
        "timestamp": "1774040413",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb4b32c4-06d4-4466-912e-86e4b5753d6b",
        "value": "apps-l-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:13+00:00",
        "timestamp": "1774040413",
        "to_ids": true,
        "type": "domain",
        "uuid": "37f08973-bddf-4f18-9bba-b350e09cd722",
        "value": "apps-l-q-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:13+00:00",
        "timestamp": "1774040413",
        "to_ids": true,
        "type": "domain",
        "uuid": "796521ce-2da0-47e0-88e2-b50d24aa3af4",
        "value": "apps-m-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:13+00:00",
        "timestamp": "1774040414",
        "to_ids": true,
        "type": "domain",
        "uuid": "57526128-3c6c-4279-a721-5772714f7435",
        "value": "apps-n-o-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:14+00:00",
        "timestamp": "1774040414",
        "to_ids": true,
        "type": "domain",
        "uuid": "874e5b01-0753-4230-8cca-7b05a1a21c65",
        "value": "apps-n-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:14+00:00",
        "timestamp": "1774040414",
        "to_ids": true,
        "type": "domain",
        "uuid": "e30b701b-bd58-480e-ae53-0a31c719a956",
        "value": "apps-q-v-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:14+00:00",
        "timestamp": "1774040414",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c01be6c-b568-4d2b-b953-c10b5c398c61",
        "value": "apps-r-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:14+00:00",
        "timestamp": "1774040414",
        "to_ids": true,
        "type": "domain",
        "uuid": "98c9b9e9-be2d-49a2-8d42-c9203e8c9f79",
        "value": "apps-s-w-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:14+00:00",
        "timestamp": "1774040414",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5124a4a-f746-41bc-b0a3-74288cd7cffc",
        "value": "apps-s-x-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:14+00:00",
        "timestamp": "1774040414",
        "to_ids": true,
        "type": "domain",
        "uuid": "53aa1f2c-4d4d-47af-b8fe-b67e4ad8709e",
        "value": "apps-u-y-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:15+00:00",
        "timestamp": "1774040415",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cfe218e-02b1-4dd2-95ab-b1a8621d48d6",
        "value": "apps-v-a-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:15+00:00",
        "timestamp": "1774040415",
        "to_ids": true,
        "type": "domain",
        "uuid": "da35dbda-12b6-4d05-bd35-bad20355f15f",
        "value": "apps-w-b-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:15+00:00",
        "timestamp": "1774040415",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b84ed18-729e-4807-a5b2-7f54e22a31c4",
        "value": "apps-y-d-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:15+00:00",
        "timestamp": "1774040415",
        "to_ids": true,
        "type": "domain",
        "uuid": "18c54e63-51e1-420a-97ce-7f2be7574027",
        "value": "apps-z-e-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:15+00:00",
        "timestamp": "1774040415",
        "to_ids": true,
        "type": "domain",
        "uuid": "98e4defa-184c-485c-be2c-d63fac767ed2",
        "value": "appweb-live-pro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:15+00:00",
        "timestamp": "1774040415",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f26f64f-9673-4ce9-939a-57cbab7ed330",
        "value": "aql-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:15+00:00",
        "timestamp": "1774040416",
        "to_ids": true,
        "type": "domain",
        "uuid": "19c1e5b8-fd6f-4fa7-83dd-f0a3f3e48698",
        "value": "aqr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:16+00:00",
        "timestamp": "1774040416",
        "to_ids": true,
        "type": "domain",
        "uuid": "58a7fff4-b475-4989-99e8-b55c5ce5a133",
        "value": "azb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:16+00:00",
        "timestamp": "1774040416",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d930869-fe7e-41db-a99f-bd86c0220bd3",
        "value": "b-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:16+00:00",
        "timestamp": "1774040416",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2f0fd79-f69a-412d-b46f-fcf31d56917b",
        "value": "b3.j-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:16+00:00",
        "timestamp": "1774040416",
        "to_ids": true,
        "type": "domain",
        "uuid": "c57f3c6f-c27c-423e-91e2-41838e95cbf8",
        "value": "b8.k-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:16+00:00",
        "timestamp": "1774040416",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd50aa40-5d72-4827-aef9-011e6602fa75",
        "value": "be-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:16+00:00",
        "timestamp": "1774040416",
        "to_ids": true,
        "type": "domain",
        "uuid": "050782db-072c-49de-984f-6743c35feb4a",
        "value": "beta-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:16+00:00",
        "timestamp": "1774040417",
        "to_ids": true,
        "type": "domain",
        "uuid": "96ed4d28-7f82-4565-888c-6e629c5f2e25",
        "value": "bfn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:17+00:00",
        "timestamp": "1774040417",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c0745ff-5ad1-4906-a743-f2b2b02c5a7e",
        "value": "blm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:17+00:00",
        "timestamp": "1774040417",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4e266d6-a82b-4866-997b-65beebad0b45",
        "value": "bqw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:17+00:00",
        "timestamp": "1774040417",
        "to_ids": true,
        "type": "domain",
        "uuid": "86c11868-795c-4edb-b43d-f409c0190899",
        "value": "bridge-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:17+00:00",
        "timestamp": "1774040417",
        "to_ids": true,
        "type": "domain",
        "uuid": "44204569-2150-4803-8b43-445b70dcb764",
        "value": "bsm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:17+00:00",
        "timestamp": "1774040417",
        "to_ids": true,
        "type": "domain",
        "uuid": "319fe2e5-d00d-4e48-982c-dad2bc66a6f2",
        "value": "bvl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:17+00:00",
        "timestamp": "1774040418",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfd979f3-ede8-4584-8b66-9d346bd0bc9c",
        "value": "bza-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:18+00:00",
        "timestamp": "1774040418",
        "to_ids": true,
        "type": "domain",
        "uuid": "7951dc09-40f8-4bf7-8d27-9d65e00f8319",
        "value": "c-app-e-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:18+00:00",
        "timestamp": "1774040418",
        "to_ids": true,
        "type": "domain",
        "uuid": "96de9856-4f96-4a95-9963-bf8b6f7d6ad4",
        "value": "c-l-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:18+00:00",
        "timestamp": "1774040418",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a16d1e4-f5b9-4469-994b-f6dbe6d55353",
        "value": "c-web-d-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:18+00:00",
        "timestamp": "1774040418",
        "to_ids": true,
        "type": "domain",
        "uuid": "f751dc6a-271a-407d-8e65-72b69d281a0d",
        "value": "c3.cdf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:18+00:00",
        "timestamp": "1774040418",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7961255-9738-49b9-80dd-ce32631f2a25",
        "value": "cdf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:18+00:00",
        "timestamp": "1774040418",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee85a16c-34b8-4b1b-b3b5-20bcac4d407d",
        "value": "ceg-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:18+00:00",
        "timestamp": "1774040419",
        "to_ids": true,
        "type": "domain",
        "uuid": "0decd9f0-fb7e-4d3b-8077-1c548f78e495",
        "value": "cex-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:19+00:00",
        "timestamp": "1774040419",
        "to_ids": true,
        "type": "domain",
        "uuid": "b78b65b4-cb87-404a-85ed-1eda45367926",
        "value": "cge-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:19+00:00",
        "timestamp": "1774040419",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6f958e8-6a32-4f76-aa58-ccebd2bc07ac",
        "value": "cgm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:19+00:00",
        "timestamp": "1774040419",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cfd156f-e8bc-4149-a5d6-4d8a4c5cc7dd",
        "value": "cgp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:19+00:00",
        "timestamp": "1774040419",
        "to_ids": true,
        "type": "domain",
        "uuid": "180f15e5-c4b1-4a3b-9cc1-6dc0932cbf6a",
        "value": "chat-im-pro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:19+00:00",
        "timestamp": "1774040419",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c167058-cc8a-4685-a8f8-a0e489257b95",
        "value": "chat-msg-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:19+00:00",
        "timestamp": "1774040420",
        "to_ids": true,
        "type": "domain",
        "uuid": "697f3180-8032-4ccd-aa81-fc0f02440957",
        "value": "chat-wap-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:20+00:00",
        "timestamp": "1774040420",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0c531b2-0e0c-420a-b5df-e214b84a2887",
        "value": "chatapp-live-cn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:20+00:00",
        "timestamp": "1774040420",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ebb16af-8efc-4a4c-affd-c524605bacd8",
        "value": "cmx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:20+00:00",
        "timestamp": "1774040420",
        "to_ids": true,
        "type": "domain",
        "uuid": "b27d2f80-ef55-4a83-a0b5-01abc91544d8",
        "value": "cn-af-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:20+00:00",
        "timestamp": "1774040420",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f5ef8b1-2d39-4da1-8fa7-7ef730a1844a",
        "value": "cn-ajur-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:20+00:00",
        "timestamp": "1774040420",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3f666ba-6416-4214-a180-1a4ce30309ae",
        "value": "cn-bdqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:20+00:00",
        "timestamp": "1774040420",
        "to_ids": true,
        "type": "domain",
        "uuid": "67da48a9-e439-4ff7-8a9b-1e9b7c4d4f3c",
        "value": "cn-bfmr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:20+00:00",
        "timestamp": "1774040421",
        "to_ids": true,
        "type": "domain",
        "uuid": "84c2fbc4-35b5-4264-91f8-ac4b8049c695",
        "value": "cn-bgly-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:21+00:00",
        "timestamp": "1774040421",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e1e7e98-4237-4d34-a4a2-504a48513d54",
        "value": "cn-bgtq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:21+00:00",
        "timestamp": "1774040421",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c1a915e-be0b-4667-8a44-8034361c5fd2",
        "value": "cn-bhij-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:21+00:00",
        "timestamp": "1774040421",
        "to_ids": true,
        "type": "domain",
        "uuid": "6febf53f-829b-42c9-8234-44342bbf14b8",
        "value": "cn-bk-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:21+00:00",
        "timestamp": "1774040421",
        "to_ids": true,
        "type": "domain",
        "uuid": "bed77bf2-b19d-43d3-8577-6839b275aa71",
        "value": "cn-bkvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:21+00:00",
        "timestamp": "1774040421",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f88b728-ab33-485d-b3bd-2a042cca5053",
        "value": "cn-bqwt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:21+00:00",
        "timestamp": "1774040422",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce66daf1-24b1-426e-ad05-52cba1b83566",
        "value": "cn-bxpl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:22+00:00",
        "timestamp": "1774040422",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2fc6e4a-aadf-4b8b-9525-7b66aad5d379",
        "value": "cn-cbtn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:22+00:00",
        "timestamp": "1774040422",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e4c41f3-3573-4df7-aa81-f314a90bb834",
        "value": "cn-cgqv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:22+00:00",
        "timestamp": "1774040422",
        "to_ids": true,
        "type": "domain",
        "uuid": "436278ea-6325-4bf1-9269-6d6a1b32bacb",
        "value": "cn-cplx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:22+00:00",
        "timestamp": "1774040422",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c6f18d8-8996-48d7-a3e2-36156e91643a",
        "value": "cn-cqxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:22+00:00",
        "timestamp": "1774040422",
        "to_ids": true,
        "type": "domain",
        "uuid": "73e27ade-6716-4da5-a008-531f5ba9fc1b",
        "value": "cn-cvrm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:22+00:00",
        "timestamp": "1774040422",
        "to_ids": true,
        "type": "domain",
        "uuid": "a09b5d54-693b-418e-a50e-9a024a7a3ea4",
        "value": "cn-cxtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:23+00:00",
        "timestamp": "1774040423",
        "to_ids": true,
        "type": "domain",
        "uuid": "e947613d-7c1f-4eaa-bf0b-2e75efddffaa",
        "value": "cn-defg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:23+00:00",
        "timestamp": "1774040423",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ba160fb-b177-47e6-bd24-14815f179408",
        "value": "cn-dgsw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:23+00:00",
        "timestamp": "1774040423",
        "to_ids": true,
        "type": "domain",
        "uuid": "98e0f9fb-5596-483a-9841-d26129cd56fb",
        "value": "cn-dhnq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:23+00:00",
        "timestamp": "1774040423",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc3a02af-bbb7-476b-b23c-e9f67fa7d1cf",
        "value": "cn-dlfp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:23+00:00",
        "timestamp": "1774040423",
        "to_ids": true,
        "type": "domain",
        "uuid": "f52df001-f7ee-469d-b967-916dc33f055e",
        "value": "cn-dnvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:23+00:00",
        "timestamp": "1774040423",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d79438a-177a-4ace-a2ef-01688b32a03e",
        "value": "cn-dqmv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:23+00:00",
        "timestamp": "1774040424",
        "to_ids": true,
        "type": "domain",
        "uuid": "567b1c9d-c49d-4103-bc83-2ad2ef4b9e8a",
        "value": "cn-dwpl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:24+00:00",
        "timestamp": "1774040424",
        "to_ids": true,
        "type": "domain",
        "uuid": "29c30912-b4a2-4ab4-a345-9828505bdcb8",
        "value": "cn-efgh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:24+00:00",
        "timestamp": "1774040424",
        "to_ids": true,
        "type": "domain",
        "uuid": "da4ca008-8527-4a32-9c5e-d716f12ed488",
        "value": "cn-egwn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:24+00:00",
        "timestamp": "1774040424",
        "to_ids": true,
        "type": "domain",
        "uuid": "1515e0ff-4382-4188-a1ee-de9235829243",
        "value": "cn-ejpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:24+00:00",
        "timestamp": "1774040424",
        "to_ids": true,
        "type": "domain",
        "uuid": "51292340-7193-484e-9d08-bd0ceb5a54aa",
        "value": "cn-ejrt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:24+00:00",
        "timestamp": "1774040424",
        "to_ids": true,
        "type": "domain",
        "uuid": "c25d3c7c-5d7c-4b32-991d-c43270bafa5b",
        "value": "cn-ekdj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:24+00:00",
        "timestamp": "1774040424",
        "to_ids": true,
        "type": "domain",
        "uuid": "688828d7-d762-4226-b472-8f1331ac29a3",
        "value": "cn-enrs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:25+00:00",
        "timestamp": "1774040425",
        "to_ids": true,
        "type": "domain",
        "uuid": "23073ac1-a7b5-4c87-9cea-ec611c535430",
        "value": "cn-fgtz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:25+00:00",
        "timestamp": "1774040425",
        "to_ids": true,
        "type": "domain",
        "uuid": "7caa7b2a-32f3-4d53-aa7a-8c24cdaabb5b",
        "value": "cn-fhkl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:25+00:00",
        "timestamp": "1774040425",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fbd1bce-f3c0-4697-a6e4-adefee277afe",
        "value": "cn-fvlk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:25+00:00",
        "timestamp": "1774040425",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfdfb684-3c36-4e62-a71f-57121ef2b86f",
        "value": "cn-fwtl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:25+00:00",
        "timestamp": "1774040425",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2110c8c-d2df-4419-ad76-1a6cd7f12788",
        "value": "cn-fztv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:25+00:00",
        "timestamp": "1774040425",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc870e88-876a-49e2-97c1-77bb544a59b8",
        "value": "cn-ghbv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:25+00:00",
        "timestamp": "1774040426",
        "to_ids": true,
        "type": "domain",
        "uuid": "f04894e1-9e85-4257-a0a1-ebd634fe156c",
        "value": "cn-gpvw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:26+00:00",
        "timestamp": "1774040426",
        "to_ids": true,
        "type": "domain",
        "uuid": "54a24bf9-b23f-4cae-97c2-1ca96d23aaef",
        "value": "cn-gqrm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:26+00:00",
        "timestamp": "1774040426",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdbaa966-ed94-4c23-80e9-b90c6cc315f7",
        "value": "cn-gqtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:26+00:00",
        "timestamp": "1774040426",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7182942-4f7d-45c6-bfeb-bd753ec3cb42",
        "value": "cn-gxo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:26+00:00",
        "timestamp": "1774040426",
        "to_ids": true,
        "type": "domain",
        "uuid": "eccda5ba-b8fe-4404-b41d-acb23ace564b",
        "value": "cn-hmpx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:26+00:00",
        "timestamp": "1774040426",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a9257cd-6f7d-435a-bfb7-66341328b883",
        "value": "cn-htrq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:26+00:00",
        "timestamp": "1774040426",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e1fc800-88e6-4afd-b674-869d3eec95df",
        "value": "cn-hxmd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:27+00:00",
        "timestamp": "1774040427",
        "to_ids": true,
        "type": "domain",
        "uuid": "7466b72a-2227-41df-962b-64af69317315",
        "value": "cn-hzmv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:27+00:00",
        "timestamp": "1774040427",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e12f85a-e59b-4110-abc3-0cd3aa9e7008",
        "value": "cn-ikqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:27+00:00",
        "timestamp": "1774040427",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7b4c3b3-594d-4d72-b46b-88f4f7f9c6a1",
        "value": "cn-ikzx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:27+00:00",
        "timestamp": "1774040427",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6cddb3f-f873-4584-abf8-1d206966d8d7",
        "value": "cn-iqlt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:27+00:00",
        "timestamp": "1774040427",
        "to_ids": true,
        "type": "domain",
        "uuid": "685344c6-26aa-4eaa-bda8-45ee26fcfbaa",
        "value": "cn-jdxq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:27+00:00",
        "timestamp": "1774040427",
        "to_ids": true,
        "type": "domain",
        "uuid": "e706aae3-ce5b-419c-bc6b-f9f3daea345e",
        "value": "cn-jhgf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:27+00:00",
        "timestamp": "1774040428",
        "to_ids": true,
        "type": "domain",
        "uuid": "9119579b-e249-43df-9db0-95b4d2694e70",
        "value": "cn-jkav-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:28+00:00",
        "timestamp": "1774040428",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae24e8b9-b013-4632-bb7f-5848c7451ccc",
        "value": "cn-jkfl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:28+00:00",
        "timestamp": "1774040428",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c972be3-6361-4692-bda2-cc4727f07663",
        "value": "cn-jntr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:28+00:00",
        "timestamp": "1774040428",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e987a07-98d5-4bf3-92bb-4a91b28d499e",
        "value": "cn-jsbc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:28+00:00",
        "timestamp": "1774040428",
        "to_ids": true,
        "type": "domain",
        "uuid": "483229ed-2e24-4bcd-98a2-9359f9dbd7cf",
        "value": "cn-jtpn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:28+00:00",
        "timestamp": "1774040428",
        "to_ids": true,
        "type": "domain",
        "uuid": "8836cd69-0778-4b36-93da-e40e4e62b7dc",
        "value": "cn-jzb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:28+00:00",
        "timestamp": "1774040428",
        "to_ids": true,
        "type": "domain",
        "uuid": "10145c6e-28df-4160-90c5-cd3690671ed6",
        "value": "cn-jzpm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:28+00:00",
        "timestamp": "1774040429",
        "to_ids": true,
        "type": "domain",
        "uuid": "165c2aa5-e17b-48aa-ab26-0bf88e4bb687",
        "value": "cn-kftl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:29+00:00",
        "timestamp": "1774040429",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e7321a1-467d-47b6-9354-e7d8f9b1b220",
        "value": "cn-kjsd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:29+00:00",
        "timestamp": "1774040429",
        "to_ids": true,
        "type": "domain",
        "uuid": "b993205c-a5bc-46d2-8384-3c92906facc8",
        "value": "cn-kqtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:29+00:00",
        "timestamp": "1774040429",
        "to_ids": true,
        "type": "domain",
        "uuid": "c218ca25-4b5e-443d-92ea-f951d804f4b8",
        "value": "cn-kqxl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:29+00:00",
        "timestamp": "1774040429",
        "to_ids": true,
        "type": "domain",
        "uuid": "22af5628-92a9-4958-839e-e1ac42ff774b",
        "value": "cn-kvrx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:29+00:00",
        "timestamp": "1774040429",
        "to_ids": true,
        "type": "domain",
        "uuid": "b74e2dbc-0fd7-4391-a6f1-612c5cc9ea05",
        "value": "cn-kztp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:29+00:00",
        "timestamp": "1774040430",
        "to_ids": true,
        "type": "domain",
        "uuid": "4064dc1e-2228-41a9-8c57-d595cdb78418",
        "value": "cn-lc-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:30+00:00",
        "timestamp": "1774040430",
        "to_ids": true,
        "type": "domain",
        "uuid": "6daf458d-458b-40f1-832c-26f73b5f7de5",
        "value": "cn-lczr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:30+00:00",
        "timestamp": "1774040430",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0664abe-7971-49b0-abc8-168d08ecc279",
        "value": "cn-ldhf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:30+00:00",
        "timestamp": "1774040430",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a127bc5-2209-411e-8590-2624d12f5be1",
        "value": "cn-lgpm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:30+00:00",
        "timestamp": "1774040430",
        "to_ids": true,
        "type": "domain",
        "uuid": "13ed654a-b1be-4dba-b2ba-ee74d0b9cd26",
        "value": "cn-lkvx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:30+00:00",
        "timestamp": "1774040430",
        "to_ids": true,
        "type": "domain",
        "uuid": "15dd7448-0a51-4416-ac08-2ebca5f7b0e9",
        "value": "cn-lmpv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:30+00:00",
        "timestamp": "1774040430",
        "to_ids": true,
        "type": "domain",
        "uuid": "b185ccb7-47a1-4b27-ba0b-9d1307dd3599",
        "value": "cn-lpqw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:30+00:00",
        "timestamp": "1774040431",
        "to_ids": true,
        "type": "domain",
        "uuid": "8efcd596-b817-4c79-b817-0f979ec6a735",
        "value": "cn-lptm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:31+00:00",
        "timestamp": "1774040431",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8252ca8-3b40-4fa2-b9ce-b8a541c29db3",
        "value": "cn-lpvd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:31+00:00",
        "timestamp": "1774040431",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d4c4ede-07c3-4bd2-8031-d56f32e58aca",
        "value": "cn-lqbt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:31+00:00",
        "timestamp": "1774040431",
        "to_ids": true,
        "type": "domain",
        "uuid": "624aff15-b4c0-4e57-a0b8-4c18b4e98217",
        "value": "cn-lqpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:31+00:00",
        "timestamp": "1774040431",
        "to_ids": true,
        "type": "domain",
        "uuid": "591c43cd-e89e-402d-9c1c-b3e5a6f60d5d",
        "value": "cn-lqsn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:31+00:00",
        "timestamp": "1774040431",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9d54cb7-dded-4f29-bc5a-1bf612a8f117",
        "value": "cn-lzkv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:31+00:00",
        "timestamp": "1774040432",
        "to_ids": true,
        "type": "domain",
        "uuid": "8253df10-a3a8-448c-859a-c896f2989a99",
        "value": "cn-mqzr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:32+00:00",
        "timestamp": "1774040432",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e2a58af-08ee-4b32-a513-f157ce3cd3c7",
        "value": "cn-mveg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:32+00:00",
        "timestamp": "1774040432",
        "to_ids": true,
        "type": "domain",
        "uuid": "1eeed2b1-6ffe-41e1-b6a1-38805cb6a68c",
        "value": "cn-mvsl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:32+00:00",
        "timestamp": "1774040432",
        "to_ids": true,
        "type": "domain",
        "uuid": "58221ce6-f656-4b4a-97aa-1be4963bf689",
        "value": "cn-nkrd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:32+00:00",
        "timestamp": "1774040432",
        "to_ids": true,
        "type": "domain",
        "uuid": "b100ec19-cdea-4c2b-ae43-4a6829cadd21",
        "value": "cn-np-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:32+00:00",
        "timestamp": "1774040432",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a0a1a47-d34c-44b7-b174-c6b6f6625b19",
        "value": "cn-nqxr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:32+00:00",
        "timestamp": "1774040432",
        "to_ids": true,
        "type": "domain",
        "uuid": "229144be-6fd6-49bb-81eb-c8c3589467f4",
        "value": "cn-nrft-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:32+00:00",
        "timestamp": "1774040433",
        "to_ids": true,
        "type": "domain",
        "uuid": "993bdeea-6154-4fdf-a926-44f366c40cd5",
        "value": "cn-nswt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:33+00:00",
        "timestamp": "1774040433",
        "to_ids": true,
        "type": "domain",
        "uuid": "53729268-4940-4e24-9167-8096846e3b4d",
        "value": "cn-nuek-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:33+00:00",
        "timestamp": "1774040433",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ecbf4ee-8eb8-4fde-ad81-5e0dd3536692",
        "value": "cn-nxpv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:33+00:00",
        "timestamp": "1774040433",
        "to_ids": true,
        "type": "domain",
        "uuid": "60f79766-d89c-4ad5-8c31-77a7658c8dbe",
        "value": "cn-orvk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:33+00:00",
        "timestamp": "1774040433",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ffdbada-de4a-4fef-93b1-90bdd0bec89a",
        "value": "cn-otkv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:33+00:00",
        "timestamp": "1774040433",
        "to_ids": true,
        "type": "domain",
        "uuid": "92cc5893-90df-451f-b3e6-e899ded8a03d",
        "value": "cn-ox-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:33+00:00",
        "timestamp": "1774040434",
        "to_ids": true,
        "type": "domain",
        "uuid": "60c0d7b8-edd2-47d5-b68a-7f1cb630223f",
        "value": "cn-pfmk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:34+00:00",
        "timestamp": "1774040434",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4923793-5e14-4b60-81ff-951452fdc82b",
        "value": "cn-pglv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:34+00:00",
        "timestamp": "1774040434",
        "to_ids": true,
        "type": "domain",
        "uuid": "28662be4-b875-48bb-8570-d691afafabca",
        "value": "cn-pmyr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:34+00:00",
        "timestamp": "1774040434",
        "to_ids": true,
        "type": "domain",
        "uuid": "95997e88-dfc1-43e7-8514-583f866122d0",
        "value": "cn-pvrx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:34+00:00",
        "timestamp": "1774040434",
        "to_ids": true,
        "type": "domain",
        "uuid": "abbcb884-78dc-46c5-8f29-44f070c01594",
        "value": "cn-qlbd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:34+00:00",
        "timestamp": "1774040434",
        "to_ids": true,
        "type": "domain",
        "uuid": "59c25a01-a8e5-4115-a11f-56369ada8f3c",
        "value": "cn-qrhx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:34+00:00",
        "timestamp": "1774040434",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3abc30a-d03d-43e3-a9c1-2fad5124c354",
        "value": "cn-qthw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:34+00:00",
        "timestamp": "1774040435",
        "to_ids": true,
        "type": "domain",
        "uuid": "8545e362-e1b0-4857-9762-2d86553bf1c7",
        "value": "cn-qzlj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:35+00:00",
        "timestamp": "1774040435",
        "to_ids": true,
        "type": "domain",
        "uuid": "341fa582-6bda-4ff1-b2a4-fe4da4c0ac3a",
        "value": "cn-rasf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:35+00:00",
        "timestamp": "1774040435",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1210761-98c3-40b6-895f-6a2680abd672",
        "value": "cn-rjkd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:35+00:00",
        "timestamp": "1774040435",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7f7cb1f-2121-45a9-b78c-8445f66d046d",
        "value": "cn-rkvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:35+00:00",
        "timestamp": "1774040435",
        "to_ids": true,
        "type": "domain",
        "uuid": "83d89e6f-fd61-4439-83a3-07312fc9634f",
        "value": "cn-rp-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:35+00:00",
        "timestamp": "1774040435",
        "to_ids": true,
        "type": "domain",
        "uuid": "4615ece7-58f3-475a-b8e5-c1cfe6a6b450",
        "value": "cn-rptv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:35+00:00",
        "timestamp": "1774040436",
        "to_ids": true,
        "type": "domain",
        "uuid": "1249c412-22c2-459f-a325-d5041ceaf199",
        "value": "cn-rvmx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:36+00:00",
        "timestamp": "1774040436",
        "to_ids": true,
        "type": "domain",
        "uuid": "96876780-5b33-485a-8f42-41356ceafa51",
        "value": "cn-rw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:36+00:00",
        "timestamp": "1774040436",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7abcdf8-7a84-4596-a481-22fb1ffdb46f",
        "value": "cn-sbvk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:36+00:00",
        "timestamp": "1774040436",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b50bd83-0339-4e55-b215-722702732ae8",
        "value": "cn-sktv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:36+00:00",
        "timestamp": "1774040436",
        "to_ids": true,
        "type": "domain",
        "uuid": "4806cc45-659d-4a2d-a2c5-60976e595679",
        "value": "cn-sm-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:36+00:00",
        "timestamp": "1774040436",
        "to_ids": true,
        "type": "domain",
        "uuid": "64ac84c4-8489-48f5-aa3a-ab5ab169d58e",
        "value": "cn-sxwf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:36+00:00",
        "timestamp": "1774040437",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3e44793-e416-4558-974c-267dbd8603e0",
        "value": "cn-tdpl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:37+00:00",
        "timestamp": "1774040437",
        "to_ids": true,
        "type": "domain",
        "uuid": "69678b01-cd9c-4edf-82d3-9fc4e6b8afb2",
        "value": "cn-tknq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:37+00:00",
        "timestamp": "1774040437",
        "to_ids": true,
        "type": "domain",
        "uuid": "de2401dc-187a-4ffb-8a87-8df0458c17bf",
        "value": "cn-tkpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:37+00:00",
        "timestamp": "1774040437",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f7af2bb-ab42-46e7-a222-19ebe43b62cc",
        "value": "cn-tkvq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:37+00:00",
        "timestamp": "1774040437",
        "to_ids": true,
        "type": "domain",
        "uuid": "357ed6c5-640a-436e-90cf-de48d7c228c0",
        "value": "cn-tpmr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:37+00:00",
        "timestamp": "1774040437",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd3c8529-870c-4a40-b5ac-cfc78e02d0c2",
        "value": "cn-tqpz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:37+00:00",
        "timestamp": "1774040437",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cf43b42-d220-47ea-9560-4d55e7d61124",
        "value": "cn-tqvp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:37+00:00",
        "timestamp": "1774040438",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4ee79db-88dd-43af-87ca-44c54a7e46d5",
        "value": "cn-ucz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:38+00:00",
        "timestamp": "1774040438",
        "to_ids": true,
        "type": "domain",
        "uuid": "14cb6bae-1b46-4d2e-b2cd-af57596f2cb1",
        "value": "cn-uqsm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:38+00:00",
        "timestamp": "1774040438",
        "to_ids": true,
        "type": "domain",
        "uuid": "1748e360-2960-4913-b99e-b599aed0bb39",
        "value": "cn-ur-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:38+00:00",
        "timestamp": "1774040438",
        "to_ids": true,
        "type": "domain",
        "uuid": "06115ca3-2e79-4847-bf69-ad0a606e9b28",
        "value": "cn-uvdr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:38+00:00",
        "timestamp": "1774040438",
        "to_ids": true,
        "type": "domain",
        "uuid": "70731b02-1ea2-4d72-8df6-ad5114ea70ce",
        "value": "cn-uvwx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:38+00:00",
        "timestamp": "1774040438",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccdae994-1016-4961-8dc9-f58b62858fe4",
        "value": "cn-uxbd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:38+00:00",
        "timestamp": "1774040439",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1d067c8-a04b-46dd-bafa-2fbd56189dce",
        "value": "cn-venp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:39+00:00",
        "timestamp": "1774040439",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f0e5343-a976-4956-90d1-09da0d1a639f",
        "value": "cn-vgrl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:39+00:00",
        "timestamp": "1774040439",
        "to_ids": true,
        "type": "domain",
        "uuid": "39b3489c-5bde-490e-b988-a6d96502b8ed",
        "value": "cn-vjra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:39+00:00",
        "timestamp": "1774040439",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e845d8d-12ec-49e2-bf08-05c051e6371f",
        "value": "cn-vklq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:39+00:00",
        "timestamp": "1774040439",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a937e42-5731-480b-81f1-6972b7060ccd",
        "value": "cn-vlqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:39+00:00",
        "timestamp": "1774040439",
        "to_ids": true,
        "type": "domain",
        "uuid": "03f02a65-5b38-4f8a-bf6e-614429d516fd",
        "value": "cn-vmd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:39+00:00",
        "timestamp": "1774040439",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bc915a9-4ff2-4f06-ae91-5adaa436de42",
        "value": "cn-vp-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:39+00:00",
        "timestamp": "1774040440",
        "to_ids": true,
        "type": "domain",
        "uuid": "11dc2fba-2759-4397-807c-f5cc2c445f5f",
        "value": "cn-vprx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:40+00:00",
        "timestamp": "1774040440",
        "to_ids": true,
        "type": "domain",
        "uuid": "127e2576-96b4-4fe0-bf92-4deb6182128e",
        "value": "cn-vwyc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:40+00:00",
        "timestamp": "1774040440",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d1f5b8c-a2d9-4066-a34a-7dc237e6642c",
        "value": "cn-vxtb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:40+00:00",
        "timestamp": "1774040440",
        "to_ids": true,
        "type": "domain",
        "uuid": "a64fc115-434b-444d-8351-befd434d6f60",
        "value": "cn-vy-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:40+00:00",
        "timestamp": "1774040440",
        "to_ids": true,
        "type": "domain",
        "uuid": "78421743-efb1-4dbf-b82a-edfcdd3e44cb",
        "value": "cn-wjlk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:40+00:00",
        "timestamp": "1774040440",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ca18f85-c315-4b6f-bf1e-6871d640b4d7",
        "value": "cn-wmlt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:40+00:00",
        "timestamp": "1774040441",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5cfec96-d596-4999-bbab-36c3aedb7611",
        "value": "cn-wqnr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:41+00:00",
        "timestamp": "1774040441",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffc6a241-61a8-4e6e-9307-1ed0d6d1c8d1",
        "value": "cn-wqs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:41+00:00",
        "timestamp": "1774040441",
        "to_ids": true,
        "type": "domain",
        "uuid": "919d16ac-3068-4faa-9f95-9414dc3b2f42",
        "value": "cn-wrdt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:41+00:00",
        "timestamp": "1774040441",
        "to_ids": true,
        "type": "domain",
        "uuid": "441fa482-22ad-4c71-af7e-753b1d289e68",
        "value": "cn-wt-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:41+00:00",
        "timestamp": "1774040441",
        "to_ids": true,
        "type": "domain",
        "uuid": "717ca614-d2d0-440c-a280-c9f5e5a0e0ac",
        "value": "cn-wztn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:41+00:00",
        "timestamp": "1774040441",
        "to_ids": true,
        "type": "domain",
        "uuid": "34c958fe-d434-4167-af98-03bd412799b2",
        "value": "cn-xgtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:41+00:00",
        "timestamp": "1774040442",
        "to_ids": true,
        "type": "domain",
        "uuid": "059785d5-9cfd-49cb-875c-631fda75fbf8",
        "value": "cn-xkbr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:42+00:00",
        "timestamp": "1774040442",
        "to_ids": true,
        "type": "domain",
        "uuid": "6123af55-3e4e-4796-907a-9641d748d964",
        "value": "cn-xklt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:42+00:00",
        "timestamp": "1774040442",
        "to_ids": true,
        "type": "domain",
        "uuid": "d804dafc-7c37-4e9f-8da1-f88628948e86",
        "value": "cn-xmtv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:42+00:00",
        "timestamp": "1774040442",
        "to_ids": true,
        "type": "domain",
        "uuid": "0647d69e-6144-49fc-84b4-c5070dff4cc2",
        "value": "cn-xqpf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:42+00:00",
        "timestamp": "1774040442",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ffc74fc-522c-4b45-b306-347bb4e83891",
        "value": "cn-xr-whatsapp.hk.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:42+00:00",
        "timestamp": "1774040442",
        "to_ids": true,
        "type": "domain",
        "uuid": "88e313b7-24c7-420b-a1da-72c954a6620f",
        "value": "cn-xrwu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:42+00:00",
        "timestamp": "1774040442",
        "to_ids": true,
        "type": "domain",
        "uuid": "17db2ef0-00db-4dbe-8ad7-ef6e5850dd29",
        "value": "cn-xwmp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:42+00:00",
        "timestamp": "1774040443",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbd00dd3-6a2e-4f7c-aad3-c4a686066902",
        "value": "cn-ykbr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:43+00:00",
        "timestamp": "1774040443",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1cf8629-536a-4705-84ab-42bcac208ddf",
        "value": "cn-ymlk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:43+00:00",
        "timestamp": "1774040443",
        "to_ids": true,
        "type": "domain",
        "uuid": "e62ebc90-fb8d-42bd-9e25-c053a6e32dec",
        "value": "cn-yqfb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:43+00:00",
        "timestamp": "1774040443",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f6263e3-2395-44aa-953b-c0ff3e537454",
        "value": "cn-yqtd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:43+00:00",
        "timestamp": "1774040443",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a590704-a0b4-4149-b089-a5bf76dd2dfe",
        "value": "cn-ytrp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:43+00:00",
        "timestamp": "1774040443",
        "to_ids": true,
        "type": "domain",
        "uuid": "b886abd6-a774-4db6-854f-9b6178237ab8",
        "value": "cn-yzab-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:43+00:00",
        "timestamp": "1774040444",
        "to_ids": true,
        "type": "domain",
        "uuid": "e52e8b7b-ac58-4d0a-bb68-c660178aa28b",
        "value": "cn-zabc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:44+00:00",
        "timestamp": "1774040444",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0d19ffa-a5f0-4b21-b5de-edbf31191231",
        "value": "cn-zbfk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:44+00:00",
        "timestamp": "1774040444",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f12e2a8-510d-4065-a177-c41d0c0bb77f",
        "value": "cn-zhrp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:44+00:00",
        "timestamp": "1774040444",
        "to_ids": true,
        "type": "domain",
        "uuid": "8187f9ee-12cd-4789-8b91-ad5e04e6250d",
        "value": "cn-zkwa-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:44+00:00",
        "timestamp": "1774040444",
        "to_ids": true,
        "type": "domain",
        "uuid": "6aba2ac4-cc6f-43b2-8d8d-bb4599d28274",
        "value": "cn-zptr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:44+00:00",
        "timestamp": "1774040444",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cc2bbfa-60b3-418f-8f7b-3ac7b0e429e8",
        "value": "cn-zvpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:44+00:00",
        "timestamp": "1774040444",
        "to_ids": true,
        "type": "domain",
        "uuid": "30b85410-dada-431f-8cdd-2e0eca70e4be",
        "value": "cnr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:44+00:00",
        "timestamp": "1774040445",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdfa602a-fba9-476b-9160-983564460625",
        "value": "com-web-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:45+00:00",
        "timestamp": "1774040445",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a038e68-0ae5-43ce-af31-5f7a5181c4a2",
        "value": "crp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:45+00:00",
        "timestamp": "1774040445",
        "to_ids": true,
        "type": "domain",
        "uuid": "204a7abf-66f2-417a-9692-79f4e6bd39e0",
        "value": "cst-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:45+00:00",
        "timestamp": "1774040445",
        "to_ids": true,
        "type": "domain",
        "uuid": "828f7091-4dd8-4e35-b4ea-20c71f454fd8",
        "value": "cv.kpn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:45+00:00",
        "timestamp": "1774040445",
        "to_ids": true,
        "type": "domain",
        "uuid": "acc9b372-6748-4920-8cbe-9b67a7518a7c",
        "value": "cva-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:45+00:00",
        "timestamp": "1774040445",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ffaf3b5-0133-418a-8570-be9848d2fdc3",
        "value": "cvm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:45+00:00",
        "timestamp": "1774040446",
        "to_ids": true,
        "type": "domain",
        "uuid": "6767ea4e-771d-4475-8074-30289602ec03",
        "value": "cw.mql-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:46+00:00",
        "timestamp": "1774040446",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad070fca-d578-42e9-a8e6-8f225ec92b59",
        "value": "cyd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:46+00:00",
        "timestamp": "1774040446",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd04329a-49a0-4403-bda4-d1fbc3d30ece",
        "value": "d-k-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:46+00:00",
        "timestamp": "1774040446",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed96f7ed-84e8-4a6d-b7ae-a5f7ad56795c",
        "value": "d-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:46+00:00",
        "timestamp": "1774040446",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa7b05ee-58a4-4854-8a15-84246757820c",
        "value": "d-web-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:46+00:00",
        "timestamp": "1774040446",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ae290ed-a3c2-46fe-b648-e1d42335b186",
        "value": "d1.mpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:46+00:00",
        "timestamp": "1774040446",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcdf921d-b824-44de-a7b7-f1e9c47d51f5",
        "value": "da.psu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:47+00:00",
        "timestamp": "1774040447",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3c52aee-95f5-4604-94f4-9401e52f793a",
        "value": "dlm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:47+00:00",
        "timestamp": "1774040447",
        "to_ids": true,
        "type": "domain",
        "uuid": "98357d5b-26be-4dba-9baf-cfd13c31090b",
        "value": "dog-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:47+00:00",
        "timestamp": "1774040447",
        "to_ids": true,
        "type": "domain",
        "uuid": "afc8331b-c153-4e3a-b95d-49b1c6394ed8",
        "value": "dqr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:47+00:00",
        "timestamp": "1774040447",
        "to_ids": true,
        "type": "domain",
        "uuid": "60c50b7b-5963-492a-9357-f0a856494b63",
        "value": "drive-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:47+00:00",
        "timestamp": "1774040447",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f9b6029-3d65-4f2f-bdc9-91981b2f0f2c",
        "value": "drt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:47+00:00",
        "timestamp": "1774040447",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b66a57f-f31d-4609-b60a-1087e8e4331d",
        "value": "dtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:47+00:00",
        "timestamp": "1774040448",
        "to_ids": true,
        "type": "domain",
        "uuid": "9045d60b-22c7-4b33-9b9a-886c18ab3f26",
        "value": "dyc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:48+00:00",
        "timestamp": "1774040448",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab553320-672f-418a-8898-a69e34133899",
        "value": "dyl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:48+00:00",
        "timestamp": "1774040448",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4604a1c-03e5-4abb-a095-62f65c6499a1",
        "value": "e-app-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:48+00:00",
        "timestamp": "1774040448",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ef5d523-18a8-4c55-b9de-bb9be71fb919",
        "value": "e-web-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:48+00:00",
        "timestamp": "1774040448",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2630c0f-7c6e-4c23-8562-92fab67352ee",
        "value": "efg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:48+00:00",
        "timestamp": "1774040448",
        "to_ids": true,
        "type": "domain",
        "uuid": "44462478-722c-4d87-a66d-bc7e3016ff5f",
        "value": "efgh.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:48+00:00",
        "timestamp": "1774040449",
        "to_ids": true,
        "type": "domain",
        "uuid": "28691202-2b87-4bb0-bd78-6aa69c5862db",
        "value": "enp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:49+00:00",
        "timestamp": "1774040449",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4f1df44-ebba-4a67-bc9c-d04f51c32f70",
        "value": "epk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:49+00:00",
        "timestamp": "1774040449",
        "to_ids": true,
        "type": "domain",
        "uuid": "4031a3fb-69a2-426b-9094-22019c893731",
        "value": "eqk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:49+00:00",
        "timestamp": "1774040449",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccf4324c-6b69-4538-8d4a-7232d7755d65",
        "value": "eqm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:49+00:00",
        "timestamp": "1774040449",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ea86793-25ee-4144-8f1e-19a7766fb5a6",
        "value": "eu-web-app-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:49+00:00",
        "timestamp": "1774040450",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7cb6fbb-45be-4a75-b7d7-c11e185cad72",
        "value": "exl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:50+00:00",
        "timestamp": "1774040450",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ce3949d-2dc3-4fd8-8152-d1116c8035da",
        "value": "f-e-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:50+00:00",
        "timestamp": "1774040450",
        "to_ids": true,
        "type": "domain",
        "uuid": "d001c0a8-d5aa-4a7a-96ca-8fa319e1af32",
        "value": "f-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:50+00:00",
        "timestamp": "1774040450",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d9e2c26-1af2-4bb1-b6a0-c462b87b5623",
        "value": "f-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:50+00:00",
        "timestamp": "1774040450",
        "to_ids": true,
        "type": "domain",
        "uuid": "cda9865c-a0aa-4a00-8c3a-f6b8e9fdc6cc",
        "value": "f-web-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:50+00:00",
        "timestamp": "1774040450",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4310b76-e444-4ef2-ba46-316cbdfbbbbf",
        "value": "faq-login-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:50+00:00",
        "timestamp": "1774040450",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd6c855f-5f4f-4bf5-8cf7-be6d5ce59c83",
        "value": "fgd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:51+00:00",
        "timestamp": "1774040451",
        "to_ids": true,
        "type": "domain",
        "uuid": "c83a5bb9-f4d9-4d67-b415-e960b5727b57",
        "value": "fix-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:51+00:00",
        "timestamp": "1774040451",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fd4c922-8bd3-4980-8b91-fc9e87f7a602",
        "value": "fr.hnp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:51+00:00",
        "timestamp": "1774040451",
        "to_ids": true,
        "type": "domain",
        "uuid": "73b13538-18f4-4498-a303-5924fcbd8203",
        "value": "fs.fix-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:51+00:00",
        "timestamp": "1774040451",
        "to_ids": true,
        "type": "domain",
        "uuid": "bacc9fae-1507-45f6-8c0e-9470bebfe01f",
        "value": "fse-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:51+00:00",
        "timestamp": "1774040451",
        "to_ids": true,
        "type": "domain",
        "uuid": "74509dd1-4603-4838-91bb-dee103439a99",
        "value": "fx.loq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:51+00:00",
        "timestamp": "1774040451",
        "to_ids": true,
        "type": "domain",
        "uuid": "7764bece-d874-4e88-94ea-2a8e85fb8aeb",
        "value": "g-app-i-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:51+00:00",
        "timestamp": "1774040452",
        "to_ids": true,
        "type": "domain",
        "uuid": "23e4429e-af33-4f28-a48f-07b65e012661",
        "value": "g-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:52+00:00",
        "timestamp": "1774040452",
        "to_ids": true,
        "type": "domain",
        "uuid": "aeb1a90d-0f75-48f2-a034-db088e245f5f",
        "value": "g-web-h-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:52+00:00",
        "timestamp": "1774040452",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f0160f1-fd75-44f2-9c92-9011ab676b5b",
        "value": "gaj-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:52+00:00",
        "timestamp": "1774040452",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac934b1b-f7f6-460b-90a7-73d93dbcd0d9",
        "value": "gfr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:52+00:00",
        "timestamp": "1774040452",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f63b7ca-f345-4112-a031-a4a9c4375ad4",
        "value": "ghi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:52+00:00",
        "timestamp": "1774040452",
        "to_ids": true,
        "type": "domain",
        "uuid": "be6e37d6-81bf-4422-858c-5b046e3337fd",
        "value": "gpd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:52+00:00",
        "timestamp": "1774040453",
        "to_ids": true,
        "type": "domain",
        "uuid": "dec7699f-7492-4cdb-b9e2-6267a134bdb8",
        "value": "gra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:53+00:00",
        "timestamp": "1774040453",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b9e9ea6-1738-44d5-99c9-57681186acbe",
        "value": "grt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:53+00:00",
        "timestamp": "1774040453",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b1b700e-4bb4-4422-a248-40e782bf5526",
        "value": "hbr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:53+00:00",
        "timestamp": "1774040453",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6ae2930-7b0f-4c94-889a-7ff598c43b20",
        "value": "hij-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:53+00:00",
        "timestamp": "1774040453",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6b73034-647e-4dd8-8260-6b07759a6d69",
        "value": "hk-aqrv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:53+00:00",
        "timestamp": "1774040453",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a047214-32b5-4478-8d2d-8e7a3a27327f",
        "value": "hk-bdqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:53+00:00",
        "timestamp": "1774040453",
        "to_ids": true,
        "type": "domain",
        "uuid": "87ff657a-18df-4233-8712-05a81b65bd60",
        "value": "hk-bfc-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:53+00:00",
        "timestamp": "1774040454",
        "to_ids": true,
        "type": "domain",
        "uuid": "32eaf658-9084-46f8-ae23-945450c3eca5",
        "value": "hk-bjut-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:54+00:00",
        "timestamp": "1774040454",
        "to_ids": true,
        "type": "domain",
        "uuid": "58784fa3-cd0c-4a42-9fc7-0f3bc6393b4c",
        "value": "hk-bptx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:54+00:00",
        "timestamp": "1774040454",
        "to_ids": true,
        "type": "domain",
        "uuid": "a688745c-29ef-4788-a3ad-ad11a2172982",
        "value": "hk-bqkx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:54+00:00",
        "timestamp": "1774040454",
        "to_ids": true,
        "type": "domain",
        "uuid": "696ec882-4c57-4bb9-9b15-71f631486c51",
        "value": "hk-bxvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:54+00:00",
        "timestamp": "1774040454",
        "to_ids": true,
        "type": "domain",
        "uuid": "331991fd-0154-4ce6-b3d5-7fd670f70ae6",
        "value": "hk-ckqv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:54+00:00",
        "timestamp": "1774040454",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d05aa07-cf37-4763-a3e9-ddc5b53d68b8",
        "value": "hk-cqxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:54+00:00",
        "timestamp": "1774040455",
        "to_ids": true,
        "type": "domain",
        "uuid": "636a7a53-b983-4fbe-b421-d4142a1ff8b1",
        "value": "hk-cymg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:55+00:00",
        "timestamp": "1774040455",
        "to_ids": true,
        "type": "domain",
        "uuid": "c88fe6e4-a0bf-495b-a111-8d7dbd6c427c",
        "value": "hk-dklq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:55+00:00",
        "timestamp": "1774040455",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d87a6cc-04ec-4127-8cf5-28dea5cff717",
        "value": "hk-dmrb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:55+00:00",
        "timestamp": "1774040455",
        "to_ids": true,
        "type": "domain",
        "uuid": "17280d58-2a70-4dab-b61b-90945744c2b7",
        "value": "hk-dqpf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:55+00:00",
        "timestamp": "1774040455",
        "to_ids": true,
        "type": "domain",
        "uuid": "05426b0f-f54c-4059-8045-1608eabeec07",
        "value": "hk-dqrv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:55+00:00",
        "timestamp": "1774040455",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e839d47-f3fe-4be3-988f-986df987d13f",
        "value": "hk-dxp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:55+00:00",
        "timestamp": "1774040455",
        "to_ids": true,
        "type": "domain",
        "uuid": "920638b7-c603-4440-9ef6-c505f174b4e1",
        "value": "hk-efwr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:55+00:00",
        "timestamp": "1774040456",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ee640cc-7f4e-42f0-806d-75a543df52e8",
        "value": "hk-egpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:56+00:00",
        "timestamp": "1774040456",
        "to_ids": true,
        "type": "domain",
        "uuid": "a62f2e94-f409-4b3f-ba04-e91d134899c2",
        "value": "hk-ekd-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:56+00:00",
        "timestamp": "1774040456",
        "to_ids": true,
        "type": "domain",
        "uuid": "61955625-9f37-4e38-971d-99f6bb6d9e16",
        "value": "hk-exlb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:56+00:00",
        "timestamp": "1774040456",
        "to_ids": true,
        "type": "domain",
        "uuid": "f61be5b3-45a7-44d9-864d-553f591768a8",
        "value": "hk-fkrp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:56+00:00",
        "timestamp": "1774040456",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b9401c4-fbb1-4f8b-91ef-5e35cb1d2d3d",
        "value": "hk-fptq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:56+00:00",
        "timestamp": "1774040456",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdfedfe2-7f29-4502-8b98-161deaf70480",
        "value": "hk-fvlk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:56+00:00",
        "timestamp": "1774040457",
        "to_ids": true,
        "type": "domain",
        "uuid": "aab1b42c-562a-4cd0-8120-1bdfc05c2770",
        "value": "hk-fvrg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:57+00:00",
        "timestamp": "1774040457",
        "to_ids": true,
        "type": "domain",
        "uuid": "42e9650c-d2df-4d7d-a768-9fb0a9aa20bc",
        "value": "hk-fwt-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:57+00:00",
        "timestamp": "1774040457",
        "to_ids": true,
        "type": "domain",
        "uuid": "73cf91e5-a66a-422d-99d9-4e10411bcfa5",
        "value": "hk-gvxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:57+00:00",
        "timestamp": "1774040457",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1dd26c9-d51b-4670-85d7-978b861d7873",
        "value": "hk-gxtl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:57+00:00",
        "timestamp": "1774040457",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cba4369-c1ef-45cf-a8e5-72bb154dc240",
        "value": "hk-gznh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:57+00:00",
        "timestamp": "1774040457",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7285a56-23a9-4b89-8909-8680f9c8d055",
        "value": "hk-hkrv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:57+00:00",
        "timestamp": "1774040457",
        "to_ids": true,
        "type": "domain",
        "uuid": "0295219a-05e7-4412-9d35-624195e111a6",
        "value": "hk-hmbq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:57+00:00",
        "timestamp": "1774040458",
        "to_ids": true,
        "type": "domain",
        "uuid": "839edf71-10f0-49b4-8cbf-eb0ffe6c949a",
        "value": "hk-hmpx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:58+00:00",
        "timestamp": "1774040458",
        "to_ids": true,
        "type": "domain",
        "uuid": "13c11135-3898-4205-a37a-0b733843b5fc",
        "value": "hk-hqlb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:58+00:00",
        "timestamp": "1774040458",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9e577d0-50e1-4702-b063-0c5c512781b5",
        "value": "hk-hqlm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:58+00:00",
        "timestamp": "1774040458",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e25cbd3-cb72-4291-ba00-0a9045166a1f",
        "value": "hk-hryu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:58+00:00",
        "timestamp": "1774040458",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b1c9a01-6266-4531-838a-7a9310fc57df",
        "value": "hk-htmp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:58+00:00",
        "timestamp": "1774040458",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ae8ef2c-0fb1-4aba-98b0-b7d7041a8106",
        "value": "hk-hwfb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:58+00:00",
        "timestamp": "1774040459",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdc1087b-e224-481f-ae08-7351815dfb0d",
        "value": "hk-ikzx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:59+00:00",
        "timestamp": "1774040459",
        "to_ids": true,
        "type": "domain",
        "uuid": "1130d3de-3e9e-43df-9763-9a122feed585",
        "value": "hk-iqbn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:59+00:00",
        "timestamp": "1774040459",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccb7011f-16c4-4333-8700-271bf32bcfc8",
        "value": "hk-jls-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:59+00:00",
        "timestamp": "1774040459",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c7460e8-c3e4-489f-bcae-a868dd53acae",
        "value": "hk-jntr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:59+00:00",
        "timestamp": "1774040459",
        "to_ids": true,
        "type": "domain",
        "uuid": "88f577ee-4d4d-4479-8b50-ef52caef17c7",
        "value": "hk-jvtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:59+00:00",
        "timestamp": "1774040459",
        "to_ids": true,
        "type": "domain",
        "uuid": "56b55a78-dbc8-4894-88f4-20fbdaf565a5",
        "value": "hk-jzpk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:00:59+00:00",
        "timestamp": "1774040460",
        "to_ids": true,
        "type": "domain",
        "uuid": "f02d39ff-e15a-4cdc-841a-42064822e0fc",
        "value": "hk-jzrd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:00+00:00",
        "timestamp": "1774040460",
        "to_ids": true,
        "type": "domain",
        "uuid": "e39928b9-1047-4938-8ddf-73ff47445a97",
        "value": "hk-kia-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:00+00:00",
        "timestamp": "1774040460",
        "to_ids": true,
        "type": "domain",
        "uuid": "83b5502b-48ab-4ea2-ab11-248d03f46a3d",
        "value": "hk-kpe-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:00+00:00",
        "timestamp": "1774040460",
        "to_ids": true,
        "type": "domain",
        "uuid": "73356d2a-5f42-4298-824d-5bfee646062d",
        "value": "hk-kptm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:00+00:00",
        "timestamp": "1774040460",
        "to_ids": true,
        "type": "domain",
        "uuid": "63452ff2-fe7a-4974-9c5a-0602cb9cd890",
        "value": "hk-kpvd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:00+00:00",
        "timestamp": "1774040460",
        "to_ids": true,
        "type": "domain",
        "uuid": "500c63dd-f864-49c3-950e-4b7b7018ff58",
        "value": "hk-kqtm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:00+00:00",
        "timestamp": "1774040460",
        "to_ids": true,
        "type": "domain",
        "uuid": "4956b65f-0b56-4268-b5f2-f7c976372bd0",
        "value": "hk-kqvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:00+00:00",
        "timestamp": "1774040461",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0e41262-a80e-4d2e-8f9b-cfebc7c7683d",
        "value": "hk-krmu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:01+00:00",
        "timestamp": "1774040461",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9da6455-52dd-467e-ab0c-eda1da55d2e6",
        "value": "hk-kwtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:01+00:00",
        "timestamp": "1774040461",
        "to_ids": true,
        "type": "domain",
        "uuid": "9850b987-f67f-4df4-8ab0-85067a6d1fca",
        "value": "hk-kzum-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:01+00:00",
        "timestamp": "1774040461",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc757050-d144-4508-9e44-bc87a7a84620",
        "value": "hk-lqbg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:01+00:00",
        "timestamp": "1774040461",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dfe35a6-143f-47e1-95cb-a3028b1f6a72",
        "value": "hk-lqpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:01+00:00",
        "timestamp": "1774040461",
        "to_ids": true,
        "type": "domain",
        "uuid": "d514d301-c384-46cd-96d0-151faacc3e4d",
        "value": "hk-lxbq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:01+00:00",
        "timestamp": "1774040462",
        "to_ids": true,
        "type": "domain",
        "uuid": "18b70147-4ecf-4543-9f98-238ca18fee6f",
        "value": "hk-mnqp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:02+00:00",
        "timestamp": "1774040462",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2ab5a56-ce5b-49bc-91f0-49b55db27283",
        "value": "hk-mnvx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:02+00:00",
        "timestamp": "1774040462",
        "to_ids": true,
        "type": "domain",
        "uuid": "32efc97b-81cd-44e8-9c9b-2a12abf19599",
        "value": "hk-mqrt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:02+00:00",
        "timestamp": "1774040462",
        "to_ids": true,
        "type": "domain",
        "uuid": "20ce9149-49be-4d2c-979f-d1dbe0bdf45d",
        "value": "hk-mqtb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:02+00:00",
        "timestamp": "1774040462",
        "to_ids": true,
        "type": "domain",
        "uuid": "b68692b4-80ab-4665-b301-7b117ba33423",
        "value": "hk-mqxz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:02+00:00",
        "timestamp": "1774040462",
        "to_ids": true,
        "type": "domain",
        "uuid": "111d8207-afd6-4a99-ae13-e182cc5d88ea",
        "value": "hk-mzvr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:02+00:00",
        "timestamp": "1774040462",
        "to_ids": true,
        "type": "domain",
        "uuid": "ada52781-9b6a-40a7-8eda-fc4492c5e5ba",
        "value": "hk-nrpb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:02+00:00",
        "timestamp": "1774040463",
        "to_ids": true,
        "type": "domain",
        "uuid": "988fa476-4fd2-4672-bb46-4f635cfc42d4",
        "value": "hk-nvrx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:03+00:00",
        "timestamp": "1774040463",
        "to_ids": true,
        "type": "domain",
        "uuid": "7034cd44-c6bd-46cb-a95c-7aa4d611a5e5",
        "value": "hk-nxlq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:03+00:00",
        "timestamp": "1774040463",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3b78c5d-c527-4fa9-b8ea-4f1cd3247c2a",
        "value": "hk-nxtb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:03+00:00",
        "timestamp": "1774040463",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8b9161c-69e4-46fe-a334-309594760ef8",
        "value": "hk-pmy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:03+00:00",
        "timestamp": "1774040463",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5e59d67-bfe5-4acb-8748-558bf15b34e4",
        "value": "hk-pqbf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:03+00:00",
        "timestamp": "1774040463",
        "to_ids": true,
        "type": "domain",
        "uuid": "d96b3d0e-aaa8-43cd-a800-abf4ac6b6342",
        "value": "hk-pqrv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:03+00:00",
        "timestamp": "1774040464",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3f2562d-4cf9-4597-8692-be8863f2c4e9",
        "value": "hk-prld-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:04+00:00",
        "timestamp": "1774040464",
        "to_ids": true,
        "type": "domain",
        "uuid": "496d5d78-6eb9-4a6c-aef9-155db900c669",
        "value": "hk-pxlc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:04+00:00",
        "timestamp": "1774040464",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2153337-0b53-4166-94f6-6ac2296fcd6a",
        "value": "hk-pzqw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:04+00:00",
        "timestamp": "1774040464",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4a2ddcb-c3f0-42f4-88ce-ba723ec9ecd1",
        "value": "hk-qwlr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:04+00:00",
        "timestamp": "1774040464",
        "to_ids": true,
        "type": "domain",
        "uuid": "114daaf0-67a4-4843-a2bf-587eba789e56",
        "value": "hk-qxmt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:04+00:00",
        "timestamp": "1774040464",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bc43d66-89cc-4b61-99d2-e6739df8b57d",
        "value": "hk-qzmk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:04+00:00",
        "timestamp": "1774040464",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec24cd4d-f5f1-4417-a292-9360d06716bc",
        "value": "hk-rjex-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:04+00:00",
        "timestamp": "1774040465",
        "to_ids": true,
        "type": "domain",
        "uuid": "dacfc2b5-3f8f-4993-903b-d31667879bca",
        "value": "hk-rldv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:05+00:00",
        "timestamp": "1774040465",
        "to_ids": true,
        "type": "domain",
        "uuid": "42760b0c-16bf-44e9-89b2-882845480ce5",
        "value": "hk-rlkp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:05+00:00",
        "timestamp": "1774040465",
        "to_ids": true,
        "type": "domain",
        "uuid": "b60dbdba-f234-405e-876b-3e0eacac2b8b",
        "value": "hk-rtkp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:05+00:00",
        "timestamp": "1774040465",
        "to_ids": true,
        "type": "domain",
        "uuid": "84e0d82c-efd7-4c63-a905-cb2ed2c88ecf",
        "value": "hk-rwx-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:05+00:00",
        "timestamp": "1774040465",
        "to_ids": true,
        "type": "domain",
        "uuid": "3262b784-95b9-44b9-b321-10b7519f7ee6",
        "value": "hk-sbpq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:05+00:00",
        "timestamp": "1774040465",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9e41537-73f5-4fe0-9a0b-208d5cdaf133",
        "value": "hk-sjl-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:05+00:00",
        "timestamp": "1774040466",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cb13f37-9adf-429b-a223-17771c3f2caf",
        "value": "hk-svbx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:06+00:00",
        "timestamp": "1774040466",
        "to_ids": true,
        "type": "domain",
        "uuid": "d889a249-97ee-4523-8417-fa2041f313fc",
        "value": "hk-svmt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:06+00:00",
        "timestamp": "1774040466",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd8c8dcc-8541-4ed1-8872-9971108c523c",
        "value": "hk-svqk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:06+00:00",
        "timestamp": "1774040466",
        "to_ids": true,
        "type": "domain",
        "uuid": "64bacdac-db64-4507-8be2-e4d960164f3f",
        "value": "hk-szqm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:06+00:00",
        "timestamp": "1774040466",
        "to_ids": true,
        "type": "domain",
        "uuid": "025634c9-7625-4062-b456-b4aada25f5ec",
        "value": "hk-tkvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:06+00:00",
        "timestamp": "1774040466",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f146b94-16bb-4069-a9ae-5a0faa4399df",
        "value": "hk-tpmr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:06+00:00",
        "timestamp": "1774040466",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd7b9899-8fd7-4848-8c03-da0fd5c33181",
        "value": "hk-txrb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:07+00:00",
        "timestamp": "1774040467",
        "to_ids": true,
        "type": "domain",
        "uuid": "24f22b04-5ef3-4909-be8a-9b400176531a",
        "value": "hk-tzxk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:07+00:00",
        "timestamp": "1774040467",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c476242-73f6-4490-973d-361b5f79b403",
        "value": "hk-uqbd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:07+00:00",
        "timestamp": "1774040467",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc0f360d-e821-4841-ad28-5e92b98c1cf7",
        "value": "hk-uvrl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:07+00:00",
        "timestamp": "1774040467",
        "to_ids": true,
        "type": "domain",
        "uuid": "a53b5774-03cf-4b3b-ba53-ddd4c2bace99",
        "value": "hk-uxnp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:07+00:00",
        "timestamp": "1774040467",
        "to_ids": true,
        "type": "domain",
        "uuid": "03643333-bd91-4daf-b9e2-1dd426424dcc",
        "value": "hk-vdlq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:07+00:00",
        "timestamp": "1774040467",
        "to_ids": true,
        "type": "domain",
        "uuid": "46440cee-72db-494b-bc69-23540aeb4068",
        "value": "hk-vxpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:07+00:00",
        "timestamp": "1774040468",
        "to_ids": true,
        "type": "domain",
        "uuid": "054cd81e-b24a-42cf-b09a-7276484ebfc1",
        "value": "hk-vxtb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:08+00:00",
        "timestamp": "1774040468",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a6f1c45-46d4-4a4e-84a7-f7333c3c6e28",
        "value": "hk-wlgf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:08+00:00",
        "timestamp": "1774040468",
        "to_ids": true,
        "type": "domain",
        "uuid": "b176c464-41b2-4605-a7ec-4b354d5742cb",
        "value": "hk-wqfp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:08+00:00",
        "timestamp": "1774040468",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7babc9a-48e7-4ffd-86f9-bc56a7fcd728",
        "value": "hk-wqkt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:08+00:00",
        "timestamp": "1774040468",
        "to_ids": true,
        "type": "domain",
        "uuid": "a492564e-ed35-428c-9b10-b79568a5b62d",
        "value": "hk-wzmb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:08+00:00",
        "timestamp": "1774040468",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a1acbfd-f9db-4d9d-8665-e8629b0db5df",
        "value": "hk-xbme-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:08+00:00",
        "timestamp": "1774040468",
        "to_ids": true,
        "type": "domain",
        "uuid": "03701844-dd65-4416-b155-691e76d65f8a",
        "value": "hk-xdrp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:09+00:00",
        "timestamp": "1774040469",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ad88a4a-cc95-4b9b-b0e1-81f717a131c5",
        "value": "hk-xgpf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:09+00:00",
        "timestamp": "1774040469",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4313f3c-a54d-49b6-bc4a-58fd3dfb58ce",
        "value": "hk-xkbr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:09+00:00",
        "timestamp": "1774040469",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7947d8d-58bf-4a9c-b7f9-e73d845740d0",
        "value": "hk-xkqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:09+00:00",
        "timestamp": "1774040469",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ab584e5-0d4f-4d0b-9e15-fe4add0d42b5",
        "value": "hk-xmgl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:09+00:00",
        "timestamp": "1774040469",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccb84e33-813d-4250-b80c-ffd281f0e4f9",
        "value": "hk-xrvk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:09+00:00",
        "timestamp": "1774040469",
        "to_ids": true,
        "type": "domain",
        "uuid": "df82ab2a-70b6-4b67-bff4-57d8870f3527",
        "value": "hk-yldk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:09+00:00",
        "timestamp": "1774040470",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d863885-feed-4969-820b-7b0781eb025f",
        "value": "hk-yqmv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:10+00:00",
        "timestamp": "1774040470",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ac1821f-c3a7-452a-bcb2-9a0a870a2476",
        "value": "hk-yqsn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:10+00:00",
        "timestamp": "1774040470",
        "to_ids": true,
        "type": "domain",
        "uuid": "da2a9743-a5cd-4152-b514-b05a6a5bee6a",
        "value": "hk-zptr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:10+00:00",
        "timestamp": "1774040470",
        "to_ids": true,
        "type": "domain",
        "uuid": "db7b0650-c5a5-493f-84e9-d2e61e8cf3e7",
        "value": "hk-zrlm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:10+00:00",
        "timestamp": "1774040470",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e6d3622-8065-4668-aca1-c46df89b9f50",
        "value": "hk-zvtr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:10+00:00",
        "timestamp": "1774040470",
        "to_ids": true,
        "type": "domain",
        "uuid": "56cb6cc7-c400-4fc7-9a6b-37bcf61c0396",
        "value": "hkb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:10+00:00",
        "timestamp": "1774040471",
        "to_ids": true,
        "type": "domain",
        "uuid": "0990c1fb-4441-4495-a1c6-67f1f78ed21c",
        "value": "hnp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:11+00:00",
        "timestamp": "1774040471",
        "to_ids": true,
        "type": "domain",
        "uuid": "227920c9-1f4c-4f16-93ff-fb7327fabdab",
        "value": "hpn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:11+00:00",
        "timestamp": "1774040471",
        "to_ids": true,
        "type": "domain",
        "uuid": "d29aa8c1-d584-4741-ab90-8861f34a8256",
        "value": "hpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:11+00:00",
        "timestamp": "1774040471",
        "to_ids": true,
        "type": "domain",
        "uuid": "368f7bd2-988d-4b48-9e0b-6bf25c4537d1",
        "value": "hub-web-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:11+00:00",
        "timestamp": "1774040471",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6934574-c811-44bb-9468-a90b3862eb48",
        "value": "hvd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:11+00:00",
        "timestamp": "1774040471",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7a529d4-6236-4632-8b37-70f200181724",
        "value": "hvk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:11+00:00",
        "timestamp": "1774040471",
        "to_ids": true,
        "type": "domain",
        "uuid": "34d96737-caf8-4fdb-9fcd-7ddcf7003b27",
        "value": "hxm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:11+00:00",
        "timestamp": "1774040472",
        "to_ids": true,
        "type": "domain",
        "uuid": "a37f42ac-3d49-453a-93e3-3f75a7b54114",
        "value": "hxt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:12+00:00",
        "timestamp": "1774040472",
        "to_ids": true,
        "type": "domain",
        "uuid": "f849db31-0e07-43c0-9d3d-27435bb58659",
        "value": "i-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:12+00:00",
        "timestamp": "1774040472",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dec1cbf-dfd1-4b23-99c5-0341c1a444d9",
        "value": "iax-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:12+00:00",
        "timestamp": "1774040472",
        "to_ids": true,
        "type": "domain",
        "uuid": "d150a503-b591-4dd8-a4bc-195a4c260c38",
        "value": "imapp-link-net-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:12+00:00",
        "timestamp": "1774040472",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef048e80-b729-4072-94e9-1fc214f4e28f",
        "value": "imweb-hk-net-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:12+00:00",
        "timestamp": "1774040472",
        "to_ids": true,
        "type": "domain",
        "uuid": "122848c5-7d67-449b-a341-57521a634c5e",
        "value": "ist-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:12+00:00",
        "timestamp": "1774040472",
        "to_ids": true,
        "type": "domain",
        "uuid": "02f00901-3a8a-4975-b5b4-2114a0e77745",
        "value": "ivw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:12+00:00",
        "timestamp": "1774040473",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ef0d617-3295-43e1-b709-f93f9f4119bb",
        "value": "izb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:13+00:00",
        "timestamp": "1774040473",
        "to_ids": true,
        "type": "domain",
        "uuid": "529dfb1e-1c16-49d6-b780-63cb47c8037f",
        "value": "j-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:13+00:00",
        "timestamp": "1774040473",
        "to_ids": true,
        "type": "domain",
        "uuid": "90b0f9f2-7104-4934-b5f1-3540115bbea1",
        "value": "jdm-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:13+00:00",
        "timestamp": "1774040473",
        "to_ids": true,
        "type": "domain",
        "uuid": "952a02b9-697f-4dc5-8f4f-956d99aa40d7",
        "value": "jfd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:13+00:00",
        "timestamp": "1774040473",
        "to_ids": true,
        "type": "domain",
        "uuid": "16d9a2cf-b0e2-450b-a9a4-2794169c34b8",
        "value": "jfk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:13+00:00",
        "timestamp": "1774040473",
        "to_ids": true,
        "type": "domain",
        "uuid": "43dbc5f9-fffc-40d9-9de5-60d37b776bfb",
        "value": "jpl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:13+00:00",
        "timestamp": "1774040474",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ab9f76a-8a93-4dba-bfff-5dc02944cfb9",
        "value": "jvd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:14+00:00",
        "timestamp": "1774040474",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3d5e80f-a294-445c-8b82-8fdce906a53c",
        "value": "jzb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:14+00:00",
        "timestamp": "1774040474",
        "to_ids": true,
        "type": "domain",
        "uuid": "997137cd-a33a-464b-9b8b-a319e9b7decd",
        "value": "jzw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:14+00:00",
        "timestamp": "1774040474",
        "to_ids": true,
        "type": "domain",
        "uuid": "e770f845-b6ab-4d35-8133-cb31e008224a",
        "value": "k-s-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:14+00:00",
        "timestamp": "1774040474",
        "to_ids": true,
        "type": "domain",
        "uuid": "88d164c9-057a-43e1-9ab7-a987adf30b03",
        "value": "k-u-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:14+00:00",
        "timestamp": "1774040474",
        "to_ids": true,
        "type": "domain",
        "uuid": "02a4514a-9c8b-45c9-9abb-d986bf57c676",
        "value": "k-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:14+00:00",
        "timestamp": "1774040474",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b2eed63-2f6e-4751-baba-5022e1bef9de",
        "value": "kgl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:14+00:00",
        "timestamp": "1774040475",
        "to_ids": true,
        "type": "domain",
        "uuid": "5839905c-dd80-4b1d-a7c3-6a1f5a614b74",
        "value": "kha-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:15+00:00",
        "timestamp": "1774040475",
        "to_ids": true,
        "type": "domain",
        "uuid": "19346b60-c9e7-4ff2-b227-052b16bcaff0",
        "value": "klm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:15+00:00",
        "timestamp": "1774040475",
        "to_ids": true,
        "type": "domain",
        "uuid": "511a5129-2bf7-4b43-a725-6bde47440a6c",
        "value": "klr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:15+00:00",
        "timestamp": "1774040475",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ed8bbbe-1dc0-487d-931d-669bd8cdc2db",
        "value": "knp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:15+00:00",
        "timestamp": "1774040475",
        "to_ids": true,
        "type": "domain",
        "uuid": "1efe41b5-ea3b-441c-b323-596efa0d14f0",
        "value": "kpn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:15+00:00",
        "timestamp": "1774040475",
        "to_ids": true,
        "type": "domain",
        "uuid": "35608942-a14a-435e-9bcb-56accedede9b",
        "value": "l-k-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:15+00:00",
        "timestamp": "1774040475",
        "to_ids": true,
        "type": "domain",
        "uuid": "7afc4d29-2a9d-4994-9827-e6d2d3e439f8",
        "value": "l-w-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:15+00:00",
        "timestamp": "1774040476",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e7e9cc0-74f4-4084-9ec8-0949f9ec8c87",
        "value": "l-web-n-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:16+00:00",
        "timestamp": "1774040476",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fed7b9d-38d5-4f8a-95bd-d24233bac0eb",
        "value": "ld.trade-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:16+00:00",
        "timestamp": "1774040476",
        "to_ids": true,
        "type": "domain",
        "uuid": "124e554b-7da2-416e-a02d-3c1ad29c6190",
        "value": "lg.r-web-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:16+00:00",
        "timestamp": "1774040476",
        "to_ids": true,
        "type": "domain",
        "uuid": "c493c8d4-ae66-4b8b-a262-9100008cf4e9",
        "value": "lh.m-z-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:16+00:00",
        "timestamp": "1774040476",
        "to_ids": true,
        "type": "domain",
        "uuid": "97674641-b985-4ed4-8533-bcb914d9c524",
        "value": "link-web-app-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:16+00:00",
        "timestamp": "1774040476",
        "to_ids": true,
        "type": "domain",
        "uuid": "91086a36-0939-4243-a22d-a4d3f8a03e52",
        "value": "linkchat-net-pro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:16+00:00",
        "timestamp": "1774040476",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d35ad0c-c865-48e0-97d4-d8c23613dfbe",
        "value": "lkn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:16+00:00",
        "timestamp": "1774040477",
        "to_ids": true,
        "type": "domain",
        "uuid": "42057aee-3ebb-4bdc-9ce4-293213b92bd5",
        "value": "lma-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:17+00:00",
        "timestamp": "1774040477",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2fad9cc-6947-4ba0-b3ce-0a9c31881d1c",
        "value": "lmi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:17+00:00",
        "timestamp": "1774040477",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2acb70b-7c23-4144-9db8-f01fc0325d04",
        "value": "ln.wap-o6-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:17+00:00",
        "timestamp": "1774040477",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3c7515b-a39a-4385-bb04-c0e1953c4d25",
        "value": "lof-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:17+00:00",
        "timestamp": "1774040477",
        "to_ids": true,
        "type": "domain",
        "uuid": "30e12cc2-24f6-4898-85e7-3d010c2a7814",
        "value": "loq-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:17+00:00",
        "timestamp": "1774040477",
        "to_ids": true,
        "type": "domain",
        "uuid": "f29eddd7-5145-45e7-b90c-0209a439b9da",
        "value": "lpd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:17+00:00",
        "timestamp": "1774040478",
        "to_ids": true,
        "type": "domain",
        "uuid": "36b1dbb6-2ea5-4d2d-90dc-58d534699134",
        "value": "lpn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:18+00:00",
        "timestamp": "1774040478",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b5fd4ad-b514-43b9-89f4-d79bdf2f73c8",
        "value": "lqf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:18+00:00",
        "timestamp": "1774040478",
        "to_ids": true,
        "type": "domain",
        "uuid": "c347f98c-4d22-4309-acc9-aa32b7e97b0f",
        "value": "m-z-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:18+00:00",
        "timestamp": "1774040478",
        "to_ids": true,
        "type": "domain",
        "uuid": "277bab93-729f-41ba-9ccf-60ce6a0a26d6",
        "value": "mnop.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:18+00:00",
        "timestamp": "1774040478",
        "to_ids": true,
        "type": "domain",
        "uuid": "cec38b53-b596-4793-b283-635121126ab6",
        "value": "mpr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:18+00:00",
        "timestamp": "1774040478",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d238820-0e35-4233-a6b0-f4245215e98b",
        "value": "mpx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:18+00:00",
        "timestamp": "1774040478",
        "to_ids": true,
        "type": "domain",
        "uuid": "d918a94e-e9fd-4961-9317-5423d2fe1a90",
        "value": "mql-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:18+00:00",
        "timestamp": "1774040479",
        "to_ids": true,
        "type": "domain",
        "uuid": "00541283-7224-4796-b4ea-81248fae33e9",
        "value": "mqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:19+00:00",
        "timestamp": "1774040479",
        "to_ids": true,
        "type": "domain",
        "uuid": "0075f070-6eec-4485-881c-18dfa018a902",
        "value": "msgweb-cn-hk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:19+00:00",
        "timestamp": "1774040479",
        "to_ids": true,
        "type": "domain",
        "uuid": "44cabaea-fa8b-402b-895e-44723daee9e2",
        "value": "mvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:19+00:00",
        "timestamp": "1774040479",
        "to_ids": true,
        "type": "domain",
        "uuid": "75ca6468-3164-440f-902d-079e8eaa393f",
        "value": "mwb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:19+00:00",
        "timestamp": "1774040479",
        "to_ids": true,
        "type": "domain",
        "uuid": "9405a5ec-407e-41f0-9e52-95a15a01224b",
        "value": "mwr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:19+00:00",
        "timestamp": "1774040479",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b2e1a48-7ef7-4667-b961-7cf179616f7c",
        "value": "mxf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:19+00:00",
        "timestamp": "1774040479",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec8d577a-6e2f-48ee-a41a-1bc88e1fbd67",
        "value": "mxy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:19+00:00",
        "timestamp": "1774040480",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7072263-442e-4a9c-9e17-4bb6bcc4bb74",
        "value": "mzt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:20+00:00",
        "timestamp": "1774040480",
        "to_ids": true,
        "type": "domain",
        "uuid": "7792a6a6-b333-40f1-a8b7-1772f458a01e",
        "value": "n-m-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:20+00:00",
        "timestamp": "1774040480",
        "to_ids": true,
        "type": "domain",
        "uuid": "023788b0-2022-4820-88ba-cd4d3da267fa",
        "value": "n9.wap-wkh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:20+00:00",
        "timestamp": "1774040480",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6e49caf-7b32-4c32-a8d7-d2b735b30b69",
        "value": "nfx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:20+00:00",
        "timestamp": "1774040480",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9e2f32a-6d8d-4fed-9f0e-5a5273608ddb",
        "value": "njo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:20+00:00",
        "timestamp": "1774040480",
        "to_ids": true,
        "type": "domain",
        "uuid": "add8b82e-d4f8-446b-8daa-5da1c9bcca22",
        "value": "nt.apps-b-c-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:20+00:00",
        "timestamp": "1774040480",
        "to_ids": true,
        "type": "domain",
        "uuid": "75ae15f8-aae0-4003-bdf8-53fc7ec45d5b",
        "value": "nvs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:20+00:00",
        "timestamp": "1774040481",
        "to_ids": true,
        "type": "domain",
        "uuid": "392e0358-b356-40ad-b1b6-949a09af02d0",
        "value": "o-p-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:21+00:00",
        "timestamp": "1774040481",
        "to_ids": true,
        "type": "domain",
        "uuid": "c57a77fe-31e8-458a-b725-b4c122cded1c",
        "value": "ok-bfc-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:21+00:00",
        "timestamp": "1774040481",
        "to_ids": true,
        "type": "domain",
        "uuid": "613900d9-a629-491d-a171-38959885f231",
        "value": "ok-bvn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:21+00:00",
        "timestamp": "1774040481",
        "to_ids": true,
        "type": "domain",
        "uuid": "75c3691d-62ef-4f36-8e0f-84bb1f188c5c",
        "value": "ok-gkh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:21+00:00",
        "timestamp": "1774040481",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1001acc-86cd-4a0f-8ddb-b24347d3fec3",
        "value": "ok-gsw-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:21+00:00",
        "timestamp": "1774040481",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a7cc430-c322-4f6a-a6a0-6851b5b94beb",
        "value": "ok-jls-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:21+00:00",
        "timestamp": "1774040481",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbef2809-a783-4605-817c-919ab7109f82",
        "value": "ok-lcz-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:22+00:00",
        "timestamp": "1774040482",
        "to_ids": true,
        "type": "domain",
        "uuid": "18cfd3e7-e7cf-46a8-94c0-e8e1661268b8",
        "value": "ok-mhs-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:22+00:00",
        "timestamp": "1774040482",
        "to_ids": true,
        "type": "domain",
        "uuid": "f48f8612-8718-4d04-8f95-04ede6ea7090",
        "value": "ok-qwe-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:22+00:00",
        "timestamp": "1774040482",
        "to_ids": true,
        "type": "domain",
        "uuid": "80ee3358-099a-43fc-bfad-3fe67e365068",
        "value": "ok-rwx-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:22+00:00",
        "timestamp": "1774040482",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7ade63f-5653-460e-b338-e60d3eff5700",
        "value": "ok-smh-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:22+00:00",
        "timestamp": "1774040482",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f0c494e-3bc6-4eb7-bd53-443fef05bef6",
        "value": "ok-vpi-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:22+00:00",
        "timestamp": "1774040482",
        "to_ids": true,
        "type": "domain",
        "uuid": "5576f726-e0cd-4455-a692-2fa9940843d1",
        "value": "ok-zgi-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:22+00:00",
        "timestamp": "1774040483",
        "to_ids": true,
        "type": "domain",
        "uuid": "03f0bd1d-517e-47eb-8401-cdcb5a44d44f",
        "value": "okp-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:23+00:00",
        "timestamp": "1774040483",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7b57fbf-e4bc-42f6-99df-e50e26b1e72d",
        "value": "online-app-link-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:23+00:00",
        "timestamp": "1774040483",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4d97c6c-e40d-4a71-a9f3-fb729dfdcfec",
        "value": "onlineapp-net-hk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:23+00:00",
        "timestamp": "1774040483",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a4523bc-9ebf-4f42-9ccf-0dc99b1676c7",
        "value": "ort-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:23+00:00",
        "timestamp": "1774040483",
        "to_ids": true,
        "type": "domain",
        "uuid": "07735e84-67b6-4b27-b0e0-6bdc790e1e7d",
        "value": "ovd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:23+00:00",
        "timestamp": "1774040483",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcab7d90-6b4c-4b46-8d63-402480c06300",
        "value": "oxc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:23+00:00",
        "timestamp": "1774040483",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7cbe2e0-5285-4b7b-9fea-d58dbd78c0a9",
        "value": "p-b-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:23+00:00",
        "timestamp": "1774040484",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0c6d7ef-dc0b-4543-a9c9-1005f41b3ad9",
        "value": "p-z-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:24+00:00",
        "timestamp": "1774040484",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd349b4e-83e9-48f0-ad45-da0bb8811e2b",
        "value": "p9.beta-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:24+00:00",
        "timestamp": "1774040484",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6803171-5b82-4155-aa29-b568e1875b4d",
        "value": "pl.dog-app-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:24+00:00",
        "timestamp": "1774040484",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce267e32-7968-4a4a-be07-75718a067e7f",
        "value": "platform-web-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:24+00:00",
        "timestamp": "1774040484",
        "to_ids": true,
        "type": "domain",
        "uuid": "58d7213d-a167-4cd0-945b-730be05468f4",
        "value": "portal-web-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:24+00:00",
        "timestamp": "1774040484",
        "to_ids": true,
        "type": "domain",
        "uuid": "76e0cafc-5c6b-4875-9ed8-9269e6fdda18",
        "value": "prv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:24+00:00",
        "timestamp": "1774040485",
        "to_ids": true,
        "type": "domain",
        "uuid": "7dddebe6-8d7c-4e72-b4bf-9668b74c5646",
        "value": "psj-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:25+00:00",
        "timestamp": "1774040485",
        "to_ids": true,
        "type": "domain",
        "uuid": "77fbfc50-781c-424b-83c2-f751571895eb",
        "value": "psu-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:25+00:00",
        "timestamp": "1774040485",
        "to_ids": true,
        "type": "domain",
        "uuid": "887df377-248d-4a7a-8f63-c2bfe3ddc071",
        "value": "psu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:25+00:00",
        "timestamp": "1774040485",
        "to_ids": true,
        "type": "domain",
        "uuid": "b75544d9-c692-4d6b-b64c-ef17fa121948",
        "value": "q-b-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:25+00:00",
        "timestamp": "1774040485",
        "to_ids": true,
        "type": "domain",
        "uuid": "043f74aa-4da6-480c-b1b9-a4231717a262",
        "value": "qmd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:25+00:00",
        "timestamp": "1774040485",
        "to_ids": true,
        "type": "domain",
        "uuid": "f51928df-d071-4239-8dd4-9cb35c48017a",
        "value": "qrv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:25+00:00",
        "timestamp": "1774040485",
        "to_ids": true,
        "type": "domain",
        "uuid": "1264a99e-b1e9-4d01-839e-bc0b2df3bfee",
        "value": "qsn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:26+00:00",
        "timestamp": "1774040486",
        "to_ids": true,
        "type": "domain",
        "uuid": "64466ea0-85f2-4673-b3a9-ef379dc2662b",
        "value": "qvc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:26+00:00",
        "timestamp": "1774040486",
        "to_ids": true,
        "type": "domain",
        "uuid": "83a7e74b-645b-43e9-a304-b912423d04f7",
        "value": "qyk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:26+00:00",
        "timestamp": "1774040486",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0347c2f-0ac6-4ad5-8df5-7ae849f4dfba",
        "value": "r-b-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:26+00:00",
        "timestamp": "1774040486",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8f011c8-bd0a-427c-8e26-c116b14bc875",
        "value": "r-web-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:26+00:00",
        "timestamp": "1774040486",
        "to_ids": true,
        "type": "domain",
        "uuid": "20508d51-b5a9-43ce-84ab-39733c637a15",
        "value": "rbg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:26+00:00",
        "timestamp": "1774040487",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ee412bc-66c3-4d5f-b600-45e517707adf",
        "value": "rgt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:27+00:00",
        "timestamp": "1774040487",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba50e119-7a30-4ba8-8ea9-457b3abbc443",
        "value": "rjb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:27+00:00",
        "timestamp": "1774040487",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ab5233f-8510-4a14-99f2-18f0c77727fe",
        "value": "rl.whatsappsupport.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:27+00:00",
        "timestamp": "1774040487",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bffae31-c3cc-43cf-bf28-4805a54de4f0",
        "value": "ro.web-cn-c-e-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:27+00:00",
        "timestamp": "1774040487",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d82c635-f903-42f9-859a-3ffe7cb4a66c",
        "value": "rpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:27+00:00",
        "timestamp": "1774040487",
        "to_ids": true,
        "type": "domain",
        "uuid": "74017a1c-7beb-4240-b832-e0cacabf17a0",
        "value": "rtx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:27+00:00",
        "timestamp": "1774040487",
        "to_ids": true,
        "type": "domain",
        "uuid": "1703cb51-54ae-429f-ad05-042609b34c37",
        "value": "s-z-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:28+00:00",
        "timestamp": "1774040488",
        "to_ids": true,
        "type": "domain",
        "uuid": "23189ff2-960e-48e5-b5e6-dc062d5330d1",
        "value": "s4.web-cn-k-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:28+00:00",
        "timestamp": "1774040488",
        "to_ids": true,
        "type": "domain",
        "uuid": "23532bf0-bc8e-4fa0-8c68-bc4af19e009d",
        "value": "sc.web-cn-o-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:28+00:00",
        "timestamp": "1774040488",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f266021-1227-4714-9e62-63f6b152808f",
        "value": "sc.whatsapp-web-chat.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:28+00:00",
        "timestamp": "1774040488",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e467fff-3f29-45cd-9d1a-d226fd3b2667",
        "value": "sg-web-data-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:28+00:00",
        "timestamp": "1774040488",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8e640cc-33c2-433a-8f3c-df2440f7b677",
        "value": "shi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:28+00:00",
        "timestamp": "1774040488",
        "to_ids": true,
        "type": "domain",
        "uuid": "6616b2a4-f51a-4f4f-9b9e-4f37382a9ae3",
        "value": "si.web-cn-r-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:28+00:00",
        "timestamp": "1774040489",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf85ff1c-8f56-4c99-9699-9432a1c80cf8",
        "value": "site-web-app-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:29+00:00",
        "timestamp": "1774040489",
        "to_ids": true,
        "type": "domain",
        "uuid": "89b297ff-b37a-4cc6-bbbd-15ef1888ed38",
        "value": "siteim-web-net-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:29+00:00",
        "timestamp": "1774040489",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7d8c84e-6a8b-4271-aa7e-facb917acdcd",
        "value": "sm.app-desk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:29+00:00",
        "timestamp": "1774040489",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cba5a89-d8a7-4912-b82f-d6aa66abaa39",
        "value": "sm.web-cn-t-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:29+00:00",
        "timestamp": "1774040489",
        "to_ids": true,
        "type": "domain",
        "uuid": "16722d08-70e4-4411-aef1-ee2af8328dd0",
        "value": "spark-app-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:29+00:00",
        "timestamp": "1774040489",
        "to_ids": true,
        "type": "domain",
        "uuid": "859374ab-b49e-4171-bc7e-fec21212f59f",
        "value": "sphere-web-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:29+00:00",
        "timestamp": "1774040489",
        "to_ids": true,
        "type": "domain",
        "uuid": "1917b807-04b7-4ee9-aaa7-841df43e618e",
        "value": "sq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:29+00:00",
        "timestamp": "1774040490",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba7aab88-b856-4d11-bfa5-88292e7a8f2d",
        "value": "sxe-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:30+00:00",
        "timestamp": "1774040490",
        "to_ids": true,
        "type": "domain",
        "uuid": "1467c725-a88e-4ae1-aa67-c20bf068f28b",
        "value": "t-d-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:30+00:00",
        "timestamp": "1774040490",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6e4659a-1fcb-4e97-867c-4d8cc8d9ccc5",
        "value": "t-web-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:30+00:00",
        "timestamp": "1774040490",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbef6968-6680-4b09-b40d-69e32845afac",
        "value": "tbg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:30+00:00",
        "timestamp": "1774040490",
        "to_ids": true,
        "type": "domain",
        "uuid": "3350bd33-d16e-4635-94d7-7a8f52989b50",
        "value": "tc.whatsapptraining.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:30+00:00",
        "timestamp": "1774040490",
        "to_ids": true,
        "type": "domain",
        "uuid": "22e3c80e-ca2c-477b-acb3-4c42c998c11d",
        "value": "tdz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:30+00:00",
        "timestamp": "1774040490",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eac234d-9522-45ae-b4f9-6058509b9aad",
        "value": "tgm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:30+00:00",
        "timestamp": "1774040491",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a402ef2-b266-44a5-9d09-a0f6629d81fc",
        "value": "tij-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:31+00:00",
        "timestamp": "1774040491",
        "to_ids": true,
        "type": "domain",
        "uuid": "f50ca7df-22a5-473d-a867-f6560c4a97f8",
        "value": "tpx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:31+00:00",
        "timestamp": "1774040491",
        "to_ids": true,
        "type": "domain",
        "uuid": "981d0d93-153a-46a3-94c9-4d091aa15f0d",
        "value": "trade-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:31+00:00",
        "timestamp": "1774040491",
        "to_ids": true,
        "type": "domain",
        "uuid": "262a6dfe-2942-45bf-9234-557fbdc7a288",
        "value": "tv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:31+00:00",
        "timestamp": "1774040491",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ad8a7be-f48d-4683-be7d-02a37764e106",
        "value": "tvy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:31+00:00",
        "timestamp": "1774040491",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c42df11-ba1d-4e41-bacd-42fa58ea6c74",
        "value": "twc-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:31+00:00",
        "timestamp": "1774040491",
        "to_ids": true,
        "type": "domain",
        "uuid": "23ea193c-cb09-4697-ba5d-d271c2fd2148",
        "value": "twy-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:32+00:00",
        "timestamp": "1774040492",
        "to_ids": true,
        "type": "domain",
        "uuid": "aad3e17f-5677-4273-b75d-9082d6162e7c",
        "value": "u-b-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:32+00:00",
        "timestamp": "1774040492",
        "to_ids": true,
        "type": "domain",
        "uuid": "b20c3225-9356-4df4-a250-0acb12c8fddb",
        "value": "uk-web-pro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:32+00:00",
        "timestamp": "1774040492",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f62d9d8-9bb9-42ed-aee6-4057b708cd80",
        "value": "um-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:32+00:00",
        "timestamp": "1774040492",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8295ebf-9fa6-4686-a371-8a805dbb8196",
        "value": "uqb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:32+00:00",
        "timestamp": "1774040492",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab2ca5ee-0fd7-4c62-bd8b-50fdc85f5dec",
        "value": "uvq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:32+00:00",
        "timestamp": "1774040492",
        "to_ids": true,
        "type": "domain",
        "uuid": "54080952-13bd-4974-9626-a71d4ebbda1b",
        "value": "vdf-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:32+00:00",
        "timestamp": "1774040493",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccd47bbf-b346-41ee-89d3-27ba829c8989",
        "value": "vfc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:33+00:00",
        "timestamp": "1774040493",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8cc3a72-9d57-4aaf-8dfb-e2e4c3d5927c",
        "value": "vsl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:33+00:00",
        "timestamp": "1774040493",
        "to_ids": true,
        "type": "domain",
        "uuid": "73d46af9-6a11-4a0e-a7f1-e69ddf025850",
        "value": "vyb-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:33+00:00",
        "timestamp": "1774040493",
        "to_ids": true,
        "type": "domain",
        "uuid": "e59e2941-e18a-4f22-9da9-d2f526dc45db",
        "value": "vyu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:33+00:00",
        "timestamp": "1774040493",
        "to_ids": true,
        "type": "domain",
        "uuid": "43503c89-9c07-4480-b954-d92de76f6670",
        "value": "vzd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:33+00:00",
        "timestamp": "1774040493",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2ce637e-7af4-46cb-83b3-43309659d010",
        "value": "vzs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:33+00:00",
        "timestamp": "1774040493",
        "to_ids": true,
        "type": "domain",
        "uuid": "38179e4d-556a-4a7e-9d5c-a9c99154a728",
        "value": "w-p-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:33+00:00",
        "timestamp": "1774040494",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b64aa93-13b7-4f46-8703-9440df190037",
        "value": "w-r-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:34+00:00",
        "timestamp": "1774040494",
        "to_ids": true,
        "type": "domain",
        "uuid": "14ebcebf-2c48-45fa-911b-8ae89160bf25",
        "value": "wap-bfc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:34+00:00",
        "timestamp": "1774040494",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ee943dd-9556-4ab6-9682-987d430538fb",
        "value": "wap-fji-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:34+00:00",
        "timestamp": "1774040494",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7ac1373-0539-447c-9d4f-b582f73899f9",
        "value": "wap-gzr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:34+00:00",
        "timestamp": "1774040494",
        "to_ids": true,
        "type": "domain",
        "uuid": "30fe624a-0471-4861-94ca-4015405f6ca1",
        "value": "wap-ipb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:34+00:00",
        "timestamp": "1774040494",
        "to_ids": true,
        "type": "domain",
        "uuid": "df140110-7198-481d-8583-91794bd6e98c",
        "value": "wap-kpe-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:34+00:00",
        "timestamp": "1774040494",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c8c5105-abdc-4be3-be29-d579611bc9f5",
        "value": "wap-lbi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:34+00:00",
        "timestamp": "1774040495",
        "to_ids": true,
        "type": "domain",
        "uuid": "ada14e73-5714-4335-8e7e-9eb815076fe5",
        "value": "wap-lkn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:35+00:00",
        "timestamp": "1774040495",
        "to_ids": true,
        "type": "domain",
        "uuid": "8707a795-1226-4443-9e2f-de022707886b",
        "value": "wap-lza-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:35+00:00",
        "timestamp": "1774040495",
        "to_ids": true,
        "type": "domain",
        "uuid": "481d6c75-225b-4582-84f7-364edbbc04d3",
        "value": "wap-mvn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:35+00:00",
        "timestamp": "1774040495",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8fb8bbb-996a-4957-a894-69121d656b82",
        "value": "wap-o6-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:35+00:00",
        "timestamp": "1774040495",
        "to_ids": true,
        "type": "domain",
        "uuid": "2119eabe-4249-4413-b92e-5d64a5170c99",
        "value": "wap-pmy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:35+00:00",
        "timestamp": "1774040495",
        "to_ids": true,
        "type": "domain",
        "uuid": "345304ce-6909-47bd-9fd7-54cbf31d1138",
        "value": "wap-pzq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:35+00:00",
        "timestamp": "1774040495",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0a01d5a-c306-4428-8839-4dd8e72fe29a",
        "value": "wap-qbx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:36+00:00",
        "timestamp": "1774040496",
        "to_ids": true,
        "type": "domain",
        "uuid": "5af79fc4-5780-4903-a369-a20f6f4726a6",
        "value": "wap-rpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:36+00:00",
        "timestamp": "1774040496",
        "to_ids": true,
        "type": "domain",
        "uuid": "3818197b-78e2-4105-be70-b3530ca5bb3b",
        "value": "wap-tdz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:36+00:00",
        "timestamp": "1774040496",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8145381-afc9-4bf5-820f-75ef2f34f725",
        "value": "wap-trv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:36+00:00",
        "timestamp": "1774040496",
        "to_ids": true,
        "type": "domain",
        "uuid": "c60eaf0e-7e56-4665-8c1c-ac5c9257c20f",
        "value": "wap-vpi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:36+00:00",
        "timestamp": "1774040496",
        "to_ids": true,
        "type": "domain",
        "uuid": "752c7798-1a98-4313-abdc-81bd055fe416",
        "value": "wap-vub-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:36+00:00",
        "timestamp": "1774040496",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a5bcc31-ad5b-45f5-be5d-223a368206ff",
        "value": "wap-vwy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:36+00:00",
        "timestamp": "1774040497",
        "to_ids": true,
        "type": "domain",
        "uuid": "a032aff3-9ba2-4102-95c8-b02d722c05d8",
        "value": "wap-wkh-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:37+00:00",
        "timestamp": "1774040497",
        "to_ids": true,
        "type": "domain",
        "uuid": "930dd9ab-0064-4666-b2f8-88e38e256db3",
        "value": "wap-woc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:37+00:00",
        "timestamp": "1774040497",
        "to_ids": true,
        "type": "domain",
        "uuid": "a623402a-a3e2-420d-ae13-29b0c4243e2f",
        "value": "wap-ykj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:37+00:00",
        "timestamp": "1774040497",
        "to_ids": true,
        "type": "domain",
        "uuid": "765a87f1-23bc-429d-b26e-5b1d3012029b",
        "value": "wap-zgi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:37+00:00",
        "timestamp": "1774040497",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce73aec3-a682-4e26-86d8-938e4a02808f",
        "value": "wapweb-cn-org-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:37+00:00",
        "timestamp": "1774040497",
        "to_ids": true,
        "type": "domain",
        "uuid": "99ba2864-1604-4260-badd-7789b8b70f3c",
        "value": "web-abc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:37+00:00",
        "timestamp": "1774040497",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7d6760d-13bf-425b-ae9a-074326bd867a",
        "value": "web-ae-cloud-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:37+00:00",
        "timestamp": "1774040498",
        "to_ids": true,
        "type": "domain",
        "uuid": "1afc015b-2cb9-43e5-8aa8-6c67345ac5a6",
        "value": "web-alpha-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:38+00:00",
        "timestamp": "1774040498",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9bce41c-1359-429f-b887-7988333bb9b3",
        "value": "web-app-cn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:38+00:00",
        "timestamp": "1774040498",
        "to_ids": true,
        "type": "domain",
        "uuid": "881809f5-b384-423a-8f87-7951ed6fb38c",
        "value": "web-au-sec-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:38+00:00",
        "timestamp": "1774040498",
        "to_ids": true,
        "type": "domain",
        "uuid": "b43e9c8a-bfb1-4577-ae51-65ae5ad45437",
        "value": "web-btm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:38+00:00",
        "timestamp": "1774040498",
        "to_ids": true,
        "type": "domain",
        "uuid": "41d04dcf-f501-4b4e-b8dd-17f7e766cfca",
        "value": "web-c-iapps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:38+00:00",
        "timestamp": "1774040498",
        "to_ids": true,
        "type": "domain",
        "uuid": "29e4683c-475e-4717-9572-fd2fb7a891bd",
        "value": "web-cn-c-e-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:38+00:00",
        "timestamp": "1774040499",
        "to_ids": true,
        "type": "domain",
        "uuid": "f25d0f70-f0d0-4038-bf3e-903d2858ec84",
        "value": "web-cn-g-i-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:39+00:00",
        "timestamp": "1774040499",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6458004-bd19-466c-b829-d5a8ef450e4a",
        "value": "web-cn-k-m-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:39+00:00",
        "timestamp": "1774040499",
        "to_ids": true,
        "type": "domain",
        "uuid": "9742b3da-e31e-4dda-bd5e-f7ad16e3e944",
        "value": "web-cn-o-q-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:39+00:00",
        "timestamp": "1774040499",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1dcd04c-f73d-44f6-8c09-2d341cc324dc",
        "value": "web-cn-r-t-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:39+00:00",
        "timestamp": "1774040499",
        "to_ids": true,
        "type": "domain",
        "uuid": "530273aa-4626-4c61-a04e-e18afe66f73e",
        "value": "web-cn-t-v-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:39+00:00",
        "timestamp": "1774040499",
        "to_ids": true,
        "type": "domain",
        "uuid": "59b4193e-ae58-4c13-81bd-556694fd6484",
        "value": "web-cn-v-x-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:39+00:00",
        "timestamp": "1774040499",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9059cad-2974-47c2-bee8-c65a53b0a62a",
        "value": "web-de-cdn-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:39+00:00",
        "timestamp": "1774040500",
        "to_ids": true,
        "type": "domain",
        "uuid": "eeddf8f1-f47d-45a7-be4e-b48f29ebcf0d",
        "value": "web-desk-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:40+00:00",
        "timestamp": "1774040500",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6ecb76a-23d9-4cda-8274-53ca77345d3c",
        "value": "web-efg-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:40+00:00",
        "timestamp": "1774040500",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffa3b5a0-1a74-4ab2-bec5-e27ba518d0f3",
        "value": "web-gfr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:40+00:00",
        "timestamp": "1774040500",
        "to_ids": true,
        "type": "domain",
        "uuid": "837e70cd-1493-4d9a-959a-80a084e83f3d",
        "value": "web-ghy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:40+00:00",
        "timestamp": "1774040500",
        "to_ids": true,
        "type": "domain",
        "uuid": "42323b99-cc81-4e02-a5e5-d2bb2b7d37f0",
        "value": "web-it-web-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:40+00:00",
        "timestamp": "1774040500",
        "to_ids": true,
        "type": "domain",
        "uuid": "a026fa0f-3c42-4dd5-a63d-62272e93cbe8",
        "value": "web-j-papps-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:40+00:00",
        "timestamp": "1774040500",
        "to_ids": true,
        "type": "domain",
        "uuid": "534e7036-167c-4fb1-92bd-097e68e7b8d4",
        "value": "web-jkl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:41+00:00",
        "timestamp": "1774040501",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2a32a8b-ae81-449c-9cd7-2ba2da9ea37c",
        "value": "web-jzw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:41+00:00",
        "timestamp": "1774040501",
        "to_ids": true,
        "type": "domain",
        "uuid": "00543c21-6978-4327-9963-d384bbd4ab0c",
        "value": "web-kls-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:41+00:00",
        "timestamp": "1774040501",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fa166e8-a1c0-4694-bc58-3a2298b62921",
        "value": "web-lcz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:41+00:00",
        "timestamp": "1774040501",
        "to_ids": true,
        "type": "domain",
        "uuid": "96b933cc-faec-4175-88c0-b1c812b4d20d",
        "value": "web-nop-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:41+00:00",
        "timestamp": "1774040501",
        "to_ids": true,
        "type": "domain",
        "uuid": "228385d7-9831-4251-9cb6-25eaa5c5dfd8",
        "value": "web-pl-auth-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:41+00:00",
        "timestamp": "1774040501",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ee529da-c80c-4443-aa8e-69cd328770d7",
        "value": "web-point-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:41+00:00",
        "timestamp": "1774040502",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb78ffac-8605-4811-864c-e4a686ca3f6c",
        "value": "web-se-sync-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:42+00:00",
        "timestamp": "1774040502",
        "to_ids": true,
        "type": "domain",
        "uuid": "431fecdc-f819-475d-9336-56bfcdecd51a",
        "value": "web-sphere-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:42+00:00",
        "timestamp": "1774040502",
        "to_ids": true,
        "type": "domain",
        "uuid": "241607f3-24df-444a-8d7d-b061208e1fdf",
        "value": "web-stu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:42+00:00",
        "timestamp": "1774040502",
        "to_ids": true,
        "type": "domain",
        "uuid": "087f259a-1107-4d27-8125-21b0d2935c2e",
        "value": "web-tdz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:42+00:00",
        "timestamp": "1774040502",
        "to_ids": true,
        "type": "domain",
        "uuid": "77c444d9-b54a-4ccc-b348-166a02906e64",
        "value": "web-th-link-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:42+00:00",
        "timestamp": "1774040502",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b6e70f2-33e8-4475-9b3f-d441759da805",
        "value": "web-uji-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:42+00:00",
        "timestamp": "1774040503",
        "to_ids": true,
        "type": "domain",
        "uuid": "feecbc48-9eed-4c56-8014-1c1f0a9d4dc5",
        "value": "web-uk-pro-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:43+00:00",
        "timestamp": "1774040503",
        "to_ids": true,
        "type": "domain",
        "uuid": "5696f785-64ee-4b00-a802-82c56d929d47",
        "value": "web-wxy-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:43+00:00",
        "timestamp": "1774040503",
        "to_ids": true,
        "type": "domain",
        "uuid": "10d3a472-672f-4157-8790-b26d024c05be",
        "value": "web-xsw-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:43+00:00",
        "timestamp": "1774040503",
        "to_ids": true,
        "type": "domain",
        "uuid": "259bc711-1055-4b77-b086-210fd8d9d139",
        "value": "web-ykj-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:43+00:00",
        "timestamp": "1774040503",
        "to_ids": true,
        "type": "domain",
        "uuid": "214502eb-d124-4818-a485-15eec8a9381a",
        "value": "whatsapp-abc.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:43+00:00",
        "timestamp": "1774040503",
        "to_ids": true,
        "type": "domain",
        "uuid": "b52db404-90b7-4426-b46b-fea975aeafa0",
        "value": "whatsapp-cde.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:43+00:00",
        "timestamp": "1774040503",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cd932be-0130-4894-830e-841921ea58d8",
        "value": "whatsapp-cfi.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:43+00:00",
        "timestamp": "1774040504",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed45c9bb-4ac2-4451-9a35-e824bbb5488b",
        "value": "whatsapp-fkl.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:44+00:00",
        "timestamp": "1774040504",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c868050-4f05-4916-b1d9-e80fdcad2de1",
        "value": "whatsapp-ijk.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:44+00:00",
        "timestamp": "1774040504",
        "to_ids": true,
        "type": "domain",
        "uuid": "2eca5759-5e41-4897-845f-b737bfa129a1",
        "value": "whatsapp-lmn.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:44+00:00",
        "timestamp": "1774040504",
        "to_ids": true,
        "type": "domain",
        "uuid": "7052c5d5-cc7d-42c5-99fc-0ec96e70b83f",
        "value": "whatsapp-mno.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:44+00:00",
        "timestamp": "1774040504",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb8ed6df-67aa-4496-bf61-384783468fd4",
        "value": "whatsapp-mqr.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:44+00:00",
        "timestamp": "1774040504",
        "to_ids": true,
        "type": "domain",
        "uuid": "8eba40e9-82ae-4a59-bef2-7fee11f93110",
        "value": "whatsapp-otv.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:44+00:00",
        "timestamp": "1774040504",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1f9ac13-6ccd-42ff-9823-46331a1fa146",
        "value": "whatsapp-pqr.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:44+00:00",
        "timestamp": "1774040505",
        "to_ids": true,
        "type": "domain",
        "uuid": "764b4b1d-a6db-4b00-a8f1-4b2d585bfac0",
        "value": "whatsapp-qwy.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:45+00:00",
        "timestamp": "1774040505",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3b09550-9ec5-450b-96a9-ea1104181ba7",
        "value": "whatsapp-stu.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:45+00:00",
        "timestamp": "1774040505",
        "to_ids": true,
        "type": "domain",
        "uuid": "416f141c-a4ce-4105-934e-879b8518e010",
        "value": "whatsapp-vwx.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:45+00:00",
        "timestamp": "1774040505",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8872ea7-2363-48e6-b7e8-084aeda0d3e5",
        "value": "whatsapp-web-chat.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:45+00:00",
        "timestamp": "1774040505",
        "to_ids": true,
        "type": "domain",
        "uuid": "07d7d2c7-fdda-4fed-aa5b-5d1cbf72a4c6",
        "value": "whatsappsupport.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:45+00:00",
        "timestamp": "1774040505",
        "to_ids": true,
        "type": "domain",
        "uuid": "43e404b8-c6c7-4580-b4db-88d59ba687ab",
        "value": "whatsapptraining.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:45+00:00",
        "timestamp": "1774040505",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b328c3e-bb92-4096-8bf9-1d8404d6da75",
        "value": "wlt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:46+00:00",
        "timestamp": "1774040506",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ddde8de-86a2-402b-9623-790c702c7f3a",
        "value": "wmp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:46+00:00",
        "timestamp": "1774040506",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fcaba24-a751-4b1a-a6c6-4df56c3c4605",
        "value": "woc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:46+00:00",
        "timestamp": "1774040506",
        "to_ids": true,
        "type": "domain",
        "uuid": "0151da4c-d0fb-486c-919a-e3107342dfb4",
        "value": "wpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:46+00:00",
        "timestamp": "1774040506",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecdeaae6-12fb-4ae3-9b20-90dc26980959",
        "value": "www.cn-af-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:46+00:00",
        "timestamp": "1774040506",
        "to_ids": true,
        "type": "domain",
        "uuid": "69757159-44cd-4358-8353-5bc134a51c6b",
        "value": "www.cn-gxo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:46+00:00",
        "timestamp": "1774040506",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c96ee58-0822-4155-a2ab-1fec65f404f2",
        "value": "www.cn-jzb-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:46+00:00",
        "timestamp": "1774040507",
        "to_ids": true,
        "type": "domain",
        "uuid": "74d60902-a787-4b71-b25f-0eca9fca9953",
        "value": "www.cn-np-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:47+00:00",
        "timestamp": "1774040507",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e0d2cac-df82-4ec5-9d15-b2d7dd51e4ca",
        "value": "www.cn-ucz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:47+00:00",
        "timestamp": "1774040507",
        "to_ids": true,
        "type": "domain",
        "uuid": "deb58a25-7eec-4d89-8953-7a489df7b822",
        "value": "www.cn-vmd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:47+00:00",
        "timestamp": "1774040507",
        "to_ids": true,
        "type": "domain",
        "uuid": "523de3cc-4931-4ddd-8af2-bf97b4956588",
        "value": "www.cn-wqs-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:47+00:00",
        "timestamp": "1774040507",
        "to_ids": true,
        "type": "domain",
        "uuid": "07946258-dc2e-420b-b733-aef5bccb6626",
        "value": "wxr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:47+00:00",
        "timestamp": "1774040507",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d1a23ff-91ac-4f86-9a15-b2dc39fb6fe5",
        "value": "xdv-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:47+00:00",
        "timestamp": "1774040507",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb2e4cf3-a9a0-45fa-ad6a-32602e47e6df",
        "value": "xldhl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:47+00:00",
        "timestamp": "1774040508",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf3e5581-fd50-4037-93aa-6ba5845b03a6",
        "value": "xpi-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:48+00:00",
        "timestamp": "1774040508",
        "to_ids": true,
        "type": "domain",
        "uuid": "32e9ec72-f520-4097-95aa-d7b080d27561",
        "value": "xpl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:48+00:00",
        "timestamp": "1774040508",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cf95503-ee35-4993-b3b3-28bace7b2801",
        "value": "xqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:48+00:00",
        "timestamp": "1774040508",
        "to_ids": true,
        "type": "domain",
        "uuid": "c86810bf-0938-4935-bc19-c78cddf3fc67",
        "value": "xyz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:48+00:00",
        "timestamp": "1774040508",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb692caf-bae5-4997-95cc-2a1164975939",
        "value": "xzr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:48+00:00",
        "timestamp": "1774040508",
        "to_ids": true,
        "type": "domain",
        "uuid": "006c99d8-c727-4636-9f08-10bb3a7bb67c",
        "value": "y-j-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:48+00:00",
        "timestamp": "1774040508",
        "to_ids": true,
        "type": "domain",
        "uuid": "851c61e7-49af-473c-a72b-d5161008dd90",
        "value": "y-web-z-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:48+00:00",
        "timestamp": "1774040509",
        "to_ids": true,
        "type": "domain",
        "uuid": "8239cb6a-9ead-41ce-a7a8-50a58fb74ff8",
        "value": "y-z-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:49+00:00",
        "timestamp": "1774040509",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed01c753-97f3-4b96-8a31-0bd9ab359d5f",
        "value": "yco-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:49+00:00",
        "timestamp": "1774040509",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8ae0ee2-45a0-4802-b401-51fd5030fe1c",
        "value": "ypl-whatapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:49+00:00",
        "timestamp": "1774040509",
        "to_ids": true,
        "type": "domain",
        "uuid": "388d81ac-274f-4f06-a6df-f0baed9ebf87",
        "value": "yqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:49+00:00",
        "timestamp": "1774040509",
        "to_ids": true,
        "type": "domain",
        "uuid": "10cfe9a7-6a5f-4698-911d-7df301180ef0",
        "value": "yr.web-sphere-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:49+00:00",
        "timestamp": "1774040509",
        "to_ids": true,
        "type": "domain",
        "uuid": "240f50d5-fba8-4c90-975d-4e898328b80c",
        "value": "yza-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:49+00:00",
        "timestamp": "1774040509",
        "to_ids": true,
        "type": "domain",
        "uuid": "7aafdb01-188e-4791-abfe-41ed3b0a80e2",
        "value": "z-y-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:50+00:00",
        "timestamp": "1774040510",
        "to_ids": true,
        "type": "domain",
        "uuid": "40e0c1c8-e390-4d85-ad48-7a825dc213e2",
        "value": "zbc-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:50+00:00",
        "timestamp": "1774040510",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e7eae17-958a-4311-baea-3e72c5935498",
        "value": "zh-he-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:50+00:00",
        "timestamp": "1774040510",
        "to_ids": true,
        "type": "domain",
        "uuid": "a22186a2-7a61-4855-9410-b6821b54261b",
        "value": "zh-ta-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:50+00:00",
        "timestamp": "1774040510",
        "to_ids": true,
        "type": "domain",
        "uuid": "fca94c04-84f2-470f-bfb9-c75c86a0d105",
        "value": "zh-zi-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:50+00:00",
        "timestamp": "1774040510",
        "to_ids": false,
        "type": "url",
        "uuid": "32b16ec0-1cf9-4113-bad6-6920951df14f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/661ca278f10eab75befb243ccf17df61fe1eb456",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:50+00:00",
        "timestamp": "1774040510",
        "to_ids": true,
        "type": "domain",
        "uuid": "234de86c-b2e7-4635-8044-da01d8e5e19f",
        "value": "rzn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:50+00:00",
        "timestamp": "1774040511",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fd1e38b-f7fe-4ba7-8387-4ec61de4ba7c",
        "value": "snp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T21:01:51+00:00",
        "timestamp": "1774040511",
        "to_ids": true,
        "type": "domain",
        "uuid": "8275e842-45b5-478b-85d0-75168d96264b",
        "value": "wap-mzp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:04+00:00",
        "timestamp": "1774047605",
        "to_ids": false,
        "type": "url",
        "uuid": "72163d51-6e27-4696-b6a1-029246760179",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9659b81af316886aaf1f57d4dc560fe37607b3f4",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:05+00:00",
        "timestamp": "1774047606",
        "to_ids": true,
        "type": "domain",
        "uuid": "e542627c-4a24-477e-8fe7-77dda427f4af",
        "value": "nid-naverdlm.servegame.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:06+00:00",
        "timestamp": "1774047606",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0265c15-965a-4ee7-9918-4f411a1e5ff7",
        "value": "nid-navernet.onthewifi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:06+00:00",
        "timestamp": "1774047606",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcfc21a9-b92a-4fea-b206-2293cbd35b3d",
        "value": "nid-naverolg.ddnsking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:06+00:00",
        "timestamp": "1774047607",
        "to_ids": true,
        "type": "domain",
        "uuid": "fae99702-cd5e-4d97-8a8e-7f32cb71e988",
        "value": "nid-naverprf.serveftp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:07+00:00",
        "timestamp": "1774047607",
        "to_ids": true,
        "type": "domain",
        "uuid": "63f3e646-a4f1-484b-b6b0-89dcd8dfc9a7",
        "value": "nid-naversea.servequake.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:07+00:00",
        "timestamp": "1774047607",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9db2cfd-1f01-432d-b3fa-341a97da33b8",
        "value": "nid-navervak.3utilities.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "domain",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:07+00:00",
        "timestamp": "1774047607",
        "to_ids": false,
        "type": "url",
        "uuid": "c7ea4fdc-6cf8-4259-9b1f-2c5d8142f630",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/220ef79d051283576db0b16b16af24d8cc2ff963",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "domain",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:07+00:00",
        "timestamp": "1774047607",
        "to_ids": false,
        "type": "url",
        "uuid": "b665b793-584e-43e9-afe0-e073e8256da5",
        "value": "https://www.virustotal.com/gui/ip-address/103.224.182.210/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "domain",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:07+00:00",
        "timestamp": "1774047607",
        "to_ids": true,
        "type": "domain",
        "uuid": "85823aac-ca36-4de0-b3c9-d679e23890e1",
        "value": "servegame.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:07+00:00",
        "timestamp": "1774047607",
        "to_ids": false,
        "type": "url",
        "uuid": "a58b559e-f84d-4d9b-9272-a0d16b2f449a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6d176f82625e126ac6a2fbbfb7a927bef8a1d5c7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:08+00:00",
        "timestamp": "1774047608",
        "to_ids": true,
        "type": "domain",
        "uuid": "130535ac-bd44-4867-a42c-dfb8086733a2",
        "value": "yuetg.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:08+00:00",
        "timestamp": "1774047608",
        "to_ids": false,
        "type": "url",
        "uuid": "065128d8-63b1-4805-9eec-3407e9b097ba",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e7ba0a760a0b6083b6124d5da59f9c1b010ee07c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:08+00:00",
        "timestamp": "1774047608",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ec2ef06-b461-452d-9134-c2e39dd87ae8",
        "value": "agreementjuice.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:08+00:00",
        "timestamp": "1774047608",
        "to_ids": true,
        "type": "domain",
        "uuid": "61a66685-e6ad-4527-a4ac-06c7bf01d6a6",
        "value": "bathnorth.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:08+00:00",
        "timestamp": "1774047608",
        "to_ids": false,
        "type": "url",
        "uuid": "841f2bd9-c8f2-4b07-9614-08eb7195d62a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a5f5699493304b6087e1c927d5d34c9ab33df97a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:08+00:00",
        "timestamp": "1774047608",
        "to_ids": false,
        "type": "url",
        "uuid": "21002759-c518-4e37-bf72-7ff5770056e1",
        "value": "https://x.com/SquiblydooBlog/status/2034916417813061736",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:08+00:00",
        "timestamp": "1774047609",
        "to_ids": false,
        "type": "url",
        "uuid": "3e0a6e71-5462-4e60-9f9b-fc2e0b893e75",
        "value": "https://www.virustotal.com/gui/file/54583d4a66ec539c991e5b46013f7e38f4a0fef9afe1cb2f53fcffebe1f8b2da/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:09+00:00",
        "timestamp": "1774047609",
        "to_ids": false,
        "type": "url",
        "uuid": "bd9bf4ee-8f4a-46c1-b66a-cd21e8284202",
        "value": "https://www.virustotal.com/gui/file/640c518ff312e024c1e3bb198a2240c59b2205ab562053a1e644276592a5c07d/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:09+00:00",
        "timestamp": "1774047609",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "62c809ef-b22f-4003-913d-acd35c5d1a1e",
        "value": "188.214.35.67",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:09+00:00",
        "timestamp": "1774047609",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0a7f312-0288-4fc8-b260-c950e2c2f61d",
        "value": "21wg02hmrp1ldfn7.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:09+00:00",
        "timestamp": "1774047609",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb3550ef-51b4-4c57-9536-a06aaf2557f4",
        "value": "dvteixixhs2m8ryu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:09+00:00",
        "timestamp": "1774047609",
        "to_ids": true,
        "type": "domain",
        "uuid": "4317abe1-4690-4ce9-a14c-6a228f5419f0",
        "value": "fao70xbsy9gff0ll.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:09+00:00",
        "timestamp": "1774047609",
        "to_ids": true,
        "type": "domain",
        "uuid": "315ec3e7-08a2-4726-8a9c-8bd4471348a8",
        "value": "gebyqsk76vri0ocd.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:10+00:00",
        "timestamp": "1774047610",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7a03871-3be9-4c25-9692-27bcb0b5d6d6",
        "value": "khbilua706wrezbf.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:10+00:00",
        "timestamp": "1774047610",
        "to_ids": true,
        "type": "domain",
        "uuid": "264aa556-5659-49ac-abb6-bd0c41b7807a",
        "value": "l7wgh93czcwqhlyt.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:10+00:00",
        "timestamp": "1774047610",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4f4054d-507c-499b-9af8-61cb328993a6",
        "value": "rdv2slcujtsiga6c.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:10+00:00",
        "timestamp": "1774047610",
        "to_ids": true,
        "type": "domain",
        "uuid": "564da7f2-ac56-4f65-b354-f27ba2a269f2",
        "value": "tk0mqqvqzjunlyv6.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:10+00:00",
        "timestamp": "1774047610",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8be7ff0-f3a3-4723-995a-4fa1183757d8",
        "value": "w00m6sh95nn7wui3.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:10+00:00",
        "timestamp": "1774047610",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6aa1f01-f574-4cac-8fae-1cd9afc75cec",
        "value": "wjhc5uqb3nine0qv.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:10+00:00",
        "timestamp": "1774047611",
        "to_ids": true,
        "type": "domain",
        "uuid": "afbacdaf-2bca-4930-a5d7-ff24c2c9a7f8",
        "value": "x0p7kv4g5g27h7to.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:11+00:00",
        "timestamp": "1774047611",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1a9363f-76bf-44c4-9304-4e7b8d684389",
        "value": "x1jyj3xw0pwn38fy.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:11+00:00",
        "timestamp": "1774047611",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8871cd8-3787-460b-a533-5a68e4b665a6",
        "value": "y7dcrc1ssuhvpzm4.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:11+00:00",
        "timestamp": "1774047611",
        "to_ids": true,
        "type": "domain",
        "uuid": "f711e593-1f14-447d-81bc-f3962d5a63ef",
        "value": "ynrev2a66l0o3zaa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:11+00:00",
        "timestamp": "1774047611",
        "to_ids": true,
        "type": "domain",
        "uuid": "be5f190f-b30a-4fa5-bfad-68dfc7b0a87b",
        "value": "za0994spazvcyo39.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xhunt",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:11+00:00",
        "timestamp": "1774047611",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e7e8ec7-306c-433f-8d3c-994cf72c0392",
        "value": "zmzk2dyqak0lcsej.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "c2_panel",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:11+00:00",
        "timestamp": "1774047612",
        "to_ids": false,
        "type": "url",
        "uuid": "5b4f4df7-6785-4d2e-b566-3aa05e750abd",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b23aa97275f289d46c29ce326731003edc5c8ee2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "c2_panel",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:12+00:00",
        "timestamp": "1774047612",
        "to_ids": false,
        "type": "url",
        "uuid": "d0106dc3-bbb7-4886-9843-aa9f4e240887",
        "value": "https://x.com/smica83/status/2035099325290738036",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "c2_panel",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:12+00:00",
        "timestamp": "1774047612",
        "to_ids": false,
        "type": "url",
        "uuid": "82a58deb-436a-4af3-bac2-2047af37c9d3",
        "value": "https://www.virustotal.com/gui/file/5ab7b4677f8c02d57436dc1710e269c547ae54e8e753c6d5fbdfc07804602b8d/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "c2_panel",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:12+00:00",
        "timestamp": "1774047612",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "312c1034-3216-49cc-b75e-8754ed6dba25",
        "value": "184.174.97.23",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic_stealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:12+00:00",
        "timestamp": "1774047613",
        "to_ids": false,
        "type": "url",
        "uuid": "d20a3cf6-df4b-4562-a8a7-86ecc6828b30",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e860a85d3d7b653e7b5c311ad1dc4c0a43c79faa",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic_stealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-20T23:00:13+00:00",
        "timestamp": "1774047613",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4d5dd0ce-ab5b-4bb8-8277-d1aa2340dff6",
        "value": "129.159.145.175",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}